Python Malware Starting to Employ Anti-Debug Techniques

Re:Python Malware Starting to Employ Anti-Debug Techniques by danuker on Friday December 23, 2022 @05:46AM (#34104359)

For instance, F-Droid only permits software that can be verifiably compiled by them.

It essentially bans binary blobs yet it is very useful.

[ Parent | on HN ]

Re:Python Malware Starting to Employ Anti-Debug Techniques by turminal on Friday December 23, 2022 @06:41AM (#34104738)

F-droid also has very different goals and lives in a much smaller and in some ways much saner ecosystem.

[ Parent | on HN ]

Re:Python Malware Starting to Employ Anti-Debug Techniques by baeaz on Friday December 23, 2022 @08:43AM (#34105682)

F-Droid is infamously known for taking weeks to build a new version of any app.

[ Parent | on HN ]

Re:Python Malware Starting to Employ Anti-Debug Techniques by yjftsjthsd-h on Friday December 23, 2022 @10:46AM (#34107031)

I'm given to understand that's more about having an offline signing process then the actual builds.

[ Parent | on HN ]

Re:Python Malware Starting to Employ Anti-Debug Techniques by BiteCode_dev on Friday December 23, 2022 @11:37AM (#34107682)

Yes, but pypi has 4 millions release to check, and the scientific and machine learning wheels are very hard to compile (scipy contains c, fortran and assembly code, and must be compiled to mac, linux and windows).

Providing a build env for that would make it prohibitively complicated and expensive, and basically would mirror github CI.

That's the reason continuum is making money: they sell a python package distribution channel that is checked and locked.

[ Parent | on HN ]