in reply to Re^5: Strict Clean JAPH (reap socket obfuscation)
in thread Reaped: Strict Clean JAPH
There is no way to know what the code does... other than it being a vector for whatever code the author chooses to offer up at that IP address/port. When I saw this code I tried to download from the address but the service at that port had already been taken down.
But it wouldn't have mattered if the code I had gotten was completely innocent. Because there is nothing to stop the author from changing what code is offered. The service can offer the same innocent code 99% of the time but add a malicious part 1% of the time.
This type of code is simply unsafe to run. It is good that the node was reaped.
- tye
|
|---|
| Replies are listed 'Best First'. | |
|---|---|
|
Re^7: Strict Clean JAPH (reap malicious code)
by Anonymous Monk on Aug 11, 2014 at 08:35 UTC |