alt Hacker NewsUnless you're clever enough to only poison user agents known to be macOS and CLI. You'd probably get by.
xz-tools was only caught because it had a bug causing slow startups and someone was micro-benchmarking Postgres and decided to dive in further.
Replies
throwawaysoxjje • yesterday at 3:49 PM
The cert is provided before the user-agent string is
One person, at that particular time. The person and the task were also a couple standard deviations away from the norm, the world was incredibly lucky.