Has anybody ever found malicious code intentionally put in open-source
You are currently reading a thread in /g/ - Technology
Has anybody ever found malicious code intentionally put in open-source software?
>>53482682
I put malicious code in open-source for a living.
>>53482682
all open-sore code is malicious, intentionally or not.
Wasn't Transmission 2.90 on OSX recently infected with malware?
>>53482755
Well OSX is already malware so that doesn't count
>>53482773
wat
ok
>>53482715
M$ or LEA?
>>53482845
Neither.
http://www.theregister.co.uk/2003/11/07/linux_kernel_backdoor_blocked/
There was that whole Chromium thing.
>>53482682
linux mint was rekt a few weeks ago
*someone slips in some remote execution code into open source project*
*isnt noticed*
*1900000 people download it*
*join the botnet and get hacked*
*nobody knows*
*until someone audits the source completely, looking for exploits*
*which rarely happens in your shovelware open sores project*
*youve all been FUCKED!*
*HAHAHAHHAHA*
>>53483214
>*isnt noticed*
ya, rite
>>53483214
>what are merge and pull requests
unless youre using rajeesh ubuntu repo, you ll be okay using the official ones
>>53482682
Pic related.
Does anyone have that post where OP claimed to have submitted malicious code to firefox?
>>53483214
>not being able to greentext
>>53484549
MS submits a ton to the kernel, mostly for comparability with HyperV. Yeah, we already know the NSA made SELinux too, no need to shitpost