News for hackers. Stuff that matters.
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by johnny22 on Friday March 29, 2024 @01:55PM (#39867021)
I don't see how showing the binary diffs would help. 99.99999% of people would just scroll right past them anyways.
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by AeroNotix on Friday March 29, 2024 @02:51PM (#39867612)
Even in binary you can see patterns. Not saying it's perfect to show binary diffs (but it is better than showing nothing) but I know even my slow mammalian brain can spot obvious human readable characters in various binary encoding formats. If I see a few in a row which doesn't make sense, why wouldn't I poke it?
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by johnny22 on Friday March 29, 2024 @04:33PM (#39868709)
Sure, the same person who's gonna be looking is the same person who'd click "show diff"
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by ok123456 on Friday March 29, 2024 @02:54PM (#39867649)
What should I look for? The evil bit set?
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by janc_ on Friday March 29, 2024 @05:48PM (#39869378)
This particular file was described as an archive file with corrupted data somewhere in the middle. Assuming you wanted to scroll that far through a hexdump of it, there could be pretty much any data in there without being suspicious.