Still on Nostr: The reason why I'm asking is I've been reading a couple of reports, and it seems like ...
The reason why I'm asking is I've been reading a couple of reports, and it seems like attackers are comfortable with just going ahead and straight up "sed i/command/command with extra stuff" on existing binaries, or replace critical components/PAM with their own stuff.
Published at
2025-04-24 05:02:33Event JSON
{
"id": "7ee4ec32743fafe266770969142a6492b1db67f4ad9b97efa45fa0f29aa263c9",
"pubkey": "6b3b9e7f61cdf2ee3defb5930b7f8be364c6d9b1787fc454b94ce0a1b7754dd1",
"created_at": 1745470953,
"kind": 1,
"tags": [
[
"e",
"96bd5a810048e637e6ad6b1d940460a526e6fb35ac367f8fb036c480e0f65720",
"wss://relay.mostr.pub",
"reply"
],
[
"proxy",
"https://infosec.exchange/users/still/statuses/114391184418992404",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.mostr.pub"
]
],
"content": "The reason why I'm asking is I've been reading a couple of reports, and it seems like attackers are comfortable with just going ahead and straight up \"sed i/command/command with extra stuff\" on existing binaries, or replace critical components/PAM with their own stuff.",
"sig": "0b3e5c3186cafdfbb99fb691bc3bbccdbbffb3d35c4fd861489917bd16e404e058641e83713b456477be808b7c7187acbef7b47f410aae0136a217708aa26021"
}
