Re:Backdoor in upstream xz/liblzma leading to SSH server com...
by johnny22 on Friday March 29, 2024 @01:55PM
(#39867021)
I don't see how showing the binary diffs would help. 99.99999% of people would just scroll right past them anyways.
[ Parent
| on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com...
by AeroNotix on Friday March 29, 2024 @02:51PM
(#39867612)
Even in binary you can see patterns. Not saying it's perfect to show binary diffs (but it is better than showing nothing) but I know even my slow mammalian brain can spot obvious human readable characters in various binary encoding formats. If I see a few in a row which doesn't make sense, why wouldn't I poke it?
Re:Backdoor in upstream xz/liblzma leading to SSH server com...
by johnny22 on Friday March 29, 2024 @04:33PM
(#39868709)
Sure, the same person who's gonna be looking is the same person who'd click "show diff"
Re:Backdoor in upstream xz/liblzma leading to SSH server com...
by ok123456 on Friday March 29, 2024 @02:54PM
(#39867649)
What should I look for? The evil bit set?
Re:Backdoor in upstream xz/liblzma leading to SSH server com...
by janc_ on Friday March 29, 2024 @05:48PM
(#39869378)
This particular file was described as an archive file with corrupted data somewhere in the middle. Assuming you wanted to scroll that far through a hexdump of it, there could be pretty much any data in there without being suspicious.