Hacker News (curated)new | past | comments | ask | show | jobs| show hidden

Unless you're clever enough to only poison user agents known to be macOS and CLI. You'd probably get by.

xz-tools was only caught because it had a bug causing slow startups and someone was micro-benchmarking Postgres and decided to dive in further.



One person, at that particular time. The person and the task were also a couple standard deviations away from the norm, the world was incredibly lucky.

The cert is provided before the user-agent string is



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact | github