← Back to context

Comment by commandersaki

4 hours ago

Doesn't affect app bundles though, only *nix commands. This'd be detected pretty quickly, at least by the significant portion of patched devices.

Unless you're clever enough to only poison user agents known to be macOS and CLI. You'd probably get by.

xz-tools was only caught because it had a bug causing slow startups and someone was micro-benchmarking Postgres and decided to dive in further.

  • One person, at that particular time. The person and the task were also a couple standard deviations away from the norm, the world was incredibly lucky.