Trusting-Trust Attack against an Entire Linux Distribution

 (arxiv.org)

40 points | by signa11 2 days ago

2 comments

  • charcircuit 7 minutes ago
    This paper can be boiled down to:

    If you have malware on your CI machine it can infect the artifacts it creates.

  • shevy-java 29 minutes ago
    In other words: AI can not be trusted.
    [-]
    • Legend2440 18 minutes ago
      Nothing about this uses AI in any way. I'm so tired of people injecting it into every conversation.
      [-]
      • hackingonempty 11 minutes ago
        AI could enable script kiddies to pull this off.