171–180 of 302 posts
Earlier quoted context omitted.
It's extremely hard to sneak backdoors in open-source code. Which is one of the reasons why a lot of people promote that openness.
Into a popular repository yes, but into a small tool like that it would most likely be very possible.
If you want to use that suspicious tool, you should at least take a glance at the source code.
Earlier quoted context omitted.
The source code itself looks relatively clean; there's autoupdate functionality but it looks like it's gated behind a confirmatory dialog box. It's much more likely that the binary releases and/or autoupdate binaries are backdoored. If someone compiles their own version, and then clicks to accept the autoupdate, they could be infected. The binary is 15+MB in size, which is far more than enough to hide a small backdoo…
It's the auto-update functionality from a now-suspect URL. The repo has since been taken down, but here's the suspect file: https://github.com/dbgsymbol/getsymbol/blob/cb4bdedc1a85c308...
https://github.com/bb33bb/getsymbol
https://github.com/clayne/win-getsymbol
here is the same link as in the comment above from one of the forks:
https://github.com/bb33bb/getsymbol/blob/main/GetSymbol/CMai...
the code fetches from `UPDATE_CHECK_URL`, which is hardcoded as:
which as of the time of this posting, returns:
"GetSymbol 2.0.3|https://dbgsymbol.com/downloads/2.0.3/GetSymbol.exe"
the GetSymbol.exe file (which is downloadable right now) being presumably the infected file being discussed..!
Earlier quoted context omitted.
It's the auto-update functionality from a now-suspect URL. The repo has since been taken down, but here's the suspect file: https://github.com/dbgsymbol/getsymbol/blob/cb4bdedc1a85c308...
Drat, archive.org didn't snag it. Do you happen to have a copy? https://web.archive.org/web/20230000000000*/https://github.c...
Earlier quoted context omitted.
Into a popular repository yes, but into a small tool like that it would most likely be very possible.
Small tool = less code to read through. If you want to use that suspicious tool, you should at least take a glance at the source code.
Earlier quoted context omitted.
I mean if we're going by the original definitions, I think Laos, Vietnam, and Cuba are also still second-world though none of them are bizarrely neo-Stalinist the way North Korea is.
Are they really Stalinists? I would have guess Maoists, but then again, I wouldn't know the difference.
Earlier quoted context omitted.
I mean if we're going by the original definitions, I think Laos, Vietnam, and Cuba are also still second-world though none of them are bizarrely neo-Stalinist the way North Korea is.
Are they really Stalinists? I would have guess Maoists, but then again, I wouldn't know the difference.
What I wonder is this: these North Koreans clearly have unrestricted internet access (sort of have to to find 0-days) and they also clearly at least understand English. How have they not accidentally stumbled across media that shows them all the things their state media doesn't?
What I wonder is this: these North Koreans clearly have unrestricted internet access (sort of have to to find 0-days) and they also clearly at least understand English. How have they not accidentally stumbled across media that shows them all the things their state media doesn't?
What I wonder is this: these North Koreans clearly have unrestricted internet access (sort of have to to find 0-days) and they also clearly at least understand English. How have they not accidentally stumbled across media that shows them all the things their state media doesn't?
They're closely monitored where they work and often have threats against their family.
Earlier quoted context omitted.
This also serves as a reminder that code hosted on github might be malicious and we shouldn't blindly trust those just because the author seems to have similar interests.. I've done that multiple times :(
That's true, but in this case the code might be fine and the executables they provide on GitHub bogus. It's tricky to keep in mind that GitHub is not a trusted build source.