News for hackers. Stuff that matters.

A comment on Over 100k Infected Repos Found on GitHub. Parent comment

Re:Over 100k Infected Repos Found on GitHub by gitaarik on Friday March 01, 2024 @11:20PM (#39569770)
How would you secretly hide something like that in FOSS? And why would that be easier? It's seems to me that it's easier to inject into an existing company than to do all the work yourself. This is what they do with most things as I understand.
[ Parent | on HN ]
Re:Over 100k Infected Repos Found on GitHub by Lt_Riza_Hawkeye on Saturday March 02, 2024 @03:39AM (#39571078)
The heartbleed vulnerability was hidden in plain sight for the better part of a decade, no?
[ Parent | on HN ]
Re:Over 100k Infected Repos Found on GitHub by gitaarik on Saturday March 02, 2024 @07:10AM (#39572011)
Yes, but that was a memory leak, giving access to unauthorized random memory. That is not an intentionally created exploit / backdoor which gives the owner easy access to the victim's system.
[ Parent | on HN ]