Hacker News new | ask | show | jobs
by temp12237792 805 days ago
OMG that's evil. The diff just shows:

  +
  +.
  +
and the dot goes unnoticed
2 comments

I wonder why they didn't use a non-breaking space or similar. I guess it's possible a nbsp would stand out even more.
They could have just misspelt one of the constants. Even less obvious and more deniable.

There's multiple things like this in this backdoor that seems like they've been super sneaky (using a compile check to disable Landlock is genius) but then half-assed the last step.

the extra dot is easily hand waved away as a mistake. a non breaking space looks intentional.
Plausible deniability probably. A dot could be a typo, a NBSP is less likely.
like a more (ostensibly) malicious “goto fail”