you are viewing a single comment's thread
view the rest of the comments
[–] 26 points 6 months ago (3 children)

This exploit appears to be inspired by the copy fail.

Should you be worried? Nah, You should not be installing untrusted software on your device. This isnt even the type of exploit that scares me. Your device gas to already be compromised for this exploit to succeed.

Supply chain attacks are what scare me.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 15 points 6 months ago

    Supply chain attacks are what scare me.

    As a former OS security pro, this is the right answer. Not because of the exploit itself, but because young (unmentored) coders readily trust some really bad patterns of pulling in random junk from the web and running it. THIS is how the LPE becomes essentially an RCE-level problem.

  • source
  • parent