Damus

Recent Notes

aeva · 13w
anyways the attack boils down to there being part of your program or the program that makes your program that you are not able or willing to read (eg nobody's got time to disassemble clang, and how do...
KT profile picture
@nprofile1q... It's difficult for that to survive future updates, which might change in ways it wasn't programmed to override. It's also difficult for that to have no side effects, beyond it's specific targets, so people would notice. (One time someone noticed a slowdown, and it led to discovering the exploit.)

People use that argument mostly to get you to use closed source software, or to trust binary plugins and packages, ignoring that this gives many more opportunities to do this with every update