Hacker News new | past | comments | ask | show | jobs | submit login

Really interesting to see a cross-platform malware with audio and video support; a lot of non-malware has difficulty with that.



Qt makes that easy, thats why they are using it.


Me thinks it would be nice to scan for Qt at the `exec()` level. I don't have a huge use for Qt, it would be nice to have to white list apps that use it.


A lot of cross platform software that attempts audio/video (e.g. Skype etc) would be considered malware by some. Usually people who've had to use it at least once.


Anything can considered malware by some. The question of course is if it's a notable assessment or is it just these "some" having a random opinion.


Serious question: Is this snark, or does the software in question do sketchy things with privilege escalation that might be leveraged into attacks?

I agree that much software has terrible UI, but it's good to distinguish surface stuff from objectively terrible security decisions.


I don't know whether this is still the case but Skype used to use some of the most advanced anti-debugging, runtime code obfuscation, etc etc methods of its time for no obvious reason. See http://www.secdev.org/conf/skype_BHEU06.handout.pdf for details. It certainly made people pause and think about what kind of shady stuff they were up to.


This is an excellent example of where user visibility into authorized processes could improve trust in software. Specifically, this software is ideal as a trojan horse; the user likely felt slightly coerced into installing it (install this plugin or you can't take part in this meeting / talk with love interest / remote family) and so they likely did so, possibly bypassing blessed trust sources. And even worse, the software is being granted privileges that are particularly ripe for abuse.

So this would lead a reasonably paranoid person to conclude that such software would be the ideal vehicle for privacy violation. Thus, if ever there is a software package for which a user ought to have visibility and enhanced control, this would be it.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: