Python Malware Starting to Employ Anti-Debug Techniques

Re:Python Malware Starting to Employ Anti-Debug Techniques by throwaway_3850 on Friday December 23, 2022 @06:13AM (#34104543)

Standards and requirements will change, bits will rot, and im not expecting any ecosystem, to keep up with comming and going demands.

A better solution imho would be project level capabilities, so you can pull in a dependency but restrict its lib/syscall access, so it would not compile when it turns malicious.

Maybe it will solve at least something, maybe some day.

[ Parent | on HN ]

Re:Python Malware Starting to Employ Anti-Debug Techniques by gumboza on Friday December 23, 2022 @09:24AM (#34106094)

Agree. I'd like to see an OpenBSD pledge(2) type system for libraries. So you can mask individual library capabilities rather than just programs. I don't want a web server that can write to the file system and I don't want a CSV reader that can talk to the network.

[ Parent | on HN ]

Re:Python Malware Starting to Employ Anti-Debug Techniques by saagarjha on Friday December 23, 2022 @09:36AM (#34106253)

Doing this kind of thing at the library level is generally not very useful, because security protections between things running in the same process are hard to make very strong.

[ Parent | on HN ]

Re:Python Malware Starting to Employ Anti-Debug Techniques by LadyCailin on Friday December 23, 2022 @11:41AM (#34107752)

This is a limitation of the particular language/ecosystem though, it feasible in a new language that has this security baked in to the language primitives.

[ Parent | on HN ]