‹ BackHN Continuity

Thread

Why does mathmain need an encrypted loader?

138 points · 43 comments · abhisek

  1. j2kun · · focus · HN ↗
    Why in the world would that specific 3x3 matrix be a trigger for an attack? Are they trying to find someone doing some particular kind of numerical analysis?
    1. ajkjk · · focus · HN ↗
      Perhaps they just need a way to sneakily activate it? Or perhaps they have a target application which they know uses that. This method suggests a supply chain attack where a valid contributor to a library 'accidentally' includes this package and the hack carries out before anyone notices.

      My guess is that it's crypto related but of course it could be anything.

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.