Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> one of the original root kits exploited a TGA bug

As a lover of old image formats and the security issues they can cause* this sounds fascinating, but some quick google searches don’t seem to surface what you are referencing. Can you share any more details?

* I once fell into discovering a memory disclosure flaw with Firefox and XBM images



There was the github ddos that existed (iirc) as an image that made a request when viewed (I think it actually ran a script) and a couple smaller botnets that used similar functionality in 2018.


Wish I could edit that, I meant jailbreak - which did give root access, technically allowing a host of nefarious use cases.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: