News for hackers. Stuff that matters.

A comment on North Korean fake job interview led to $6.3B Binance heist. Parent comment

Re:North Korean fake job interview led to $6.3B Binance heist by cldellow on Wednesday November 04, 2026 @02:33PM (#50370441)
"fork this repo and fix this bug" is a common job interview request, isn't it?

For many build chains, that involves implicitly installing software.

[ Parent | on HN ]
Re:North Korean fake job interview led to $6.3B Binance heist by fc417fc802 on Wednesday November 04, 2026 @06:17PM (#50372791)
Such toolchains are dumpster fires whose use invites supply chain attacks. They should never have gained mainstream acceptance and should never be run outside of a sandbox.

That said I wouldn't trust a compiler to be hardened against malicious input and anyway you presumably need to run the output so all of that should be happening in a hardened sandbox regardless.

[ Parent | on HN ]