In turn it compromises ssh authentication allows remote code execution via system(); if the connecting SSH certificate contains the backdoor key. No user account required. Nothing logged anywhere you'd expect. Full root code execution.
There is also a killswitch hard-coded into it, so it doesn't affect machines of whatever state actor developed it.
It's pretty clear this is a state actor, targeting a dependency of one of the most widely used system control software on Linux systems. There are likely tens or hundreds of other actors doing the exact same thing. This one was detected purely by chance, as it wasn't even in the code for ssh.
If people ever wonder how cyber warfare could potentially cause a massive blackout and communications system interruption - this is how.
It's not about anti-censorship (making your VPN traffic look like regular traffic) it's about the IP address at the end of the VPN connection. They have a list of known VPN provider IP ranges and block those. If you run a proxy server or VPN on a your own private VPS for example, then it won't be detected.
They started also blocking OLD.reddit.com this week. I made a comment a couple months ago alluding to old.reddit.com still working even though they were blocking tor and known VPNs on www.reddit.com. I'm sure about 10,000 other people figured it out at the same time as me, since it was such a simple bypass, and I'm surprised it took this long to fix.
There are still at least 2 other unpatched ways.
Glad you commented because I read this as "forging chemotherapy on your dog" as in, commiting some kind of vet fraud. I was certainly surprised at that recommendation coming from Bloomberg.
It's a peptide lol. A bond of amino acids. That's why Chinese suppliers sell it for $5-10/vial in bulk and still make a shitload of money.
Much wow, big pharma did drug AI a little sooner than the rest of them.
Id development of these drugs costs as much as our GDP, they're doing things seriously fucking wrong.
No, it clearly says bwayno dee-us. They're scientists. Do you think they can't speak dolphin?
I knew this from basic grammar lessons in grade school. I didn't even graduate high school. I'm a bit sad this needs to be explained.
People just don't read enough anymore to read titles correctly.
If you do end up hacking on it, and can remember to come back and say so, please let me know the name of the sub. Or if you make one now I'll subscribe and hope to see it show up at some point.
@Synnr
@sopuli.xyz