undefined | Better HN

0 pointstedunangst8y ago0 comments

It's not immediately clear, however, how one would conduct a cache timing attack against the package manager.

0 comments

2 comments · 1 top-level

Sephr8y ago· 1 in thread

Through bad antivirus code that inadvertently runs your code in a sandbox. There have been multiple vulnerabilities like this recently.

Sounds like we should design our package managers so that they don't run hostile code in a sandbox.

j / k navigate · click thread line to collapse