News for hackers. Stuff that matters.
Re:TeamViewer installs suspicious font only useful for web f... by tiagod on Wednesday July 20, 2022 @11:51AM (#32167500)
They didn't, really.

Sure, the installer ships a font file, and sure, the most obvious answer is that it's just installed as is.

But my app also ships a bunch of templates, and it doesn't mean users will always see the same thing when they're loaded. The font binary could have some magic number that's replaced with a fingerprint ID.

Most likely it isn't, but the work to verify would actually involve installing TV in two different machines, and comparing the installed files.

Re:TeamViewer installs suspicious font only useful for web f... by dymk on Wednesday July 20, 2022 @02:56PM (#32170514)
They did, really.

If you think they're going through the hassle to ship a font file but sleight-of-hand install a different font, then why do you think they wouldn't also go through the hassle of further hide what they're doing? For instance, replace a preexisting font you wouldn't think to look at?

If you think it's honest-to-god malware, then provide evidence that it's malware. Installing a font does not make software malware. Checking for the presence of an installed font is not malware.