Please disable JavaScript to view this site

Re:Please disable JavaScript to view this site by billyhoffman on Saturday November 28, 2020 @11:29PM (#25242919)

> one of the original root kits exploited a TGA bug

As a lover of old image formats and the security issues they can cause* this sounds fascinating, but some quick google searches don’t seem to surface what you are referencing. Can you share any more details?

* I once fell into discovering a memory disclosure flaw with Firefox and XBM images

[ Parent | on HN ]

Re:Please disable JavaScript to view this site by edgyquant on Sunday November 29, 2020 @12:40AM (#25243180)

There was the github ddos that existed (iirc) as an image that made a request when viewed (I think it actually ran a script) and a couple smaller botnets that used similar functionality in 2018.

[ Parent | on HN ]

Re:Please disable JavaScript to view this site by zamalek on Sunday November 29, 2020 @11:50AM (#25246254)

Wish I could edit that, I meant jailbreak - which did give root access, technically allowing a host of nefarious use cases.

[ Parent | on HN ]