Hacker News Reader

Someone noticed it in September, opened an issue, and got no response. https://github.com/bitmaintech/bmminer/issues/7

It also looks like the backdoor may have a remote code execution vulnerability: https://twitter.com/petertoddbtc/status/857340167400587264

View on HN

Relevant source code:

https://github.com/bitmaintech/bmminer/blob/b5de92908498590d...

Edit: Nobody cares about the vulnerability until it has a name and a logo :-)

An 8000+ line C file. I can understand how a single bug might be overlooked there.

It wasn't overlooked though. Issue was raised in Sept 2016

https://github.com/bitmaintech/bmminer/issues/7

Or a single malicious "feature"...

It has a bug but it's only an out-of-bounds read, not a write. So you might be able to make it crash, but why would you want to? Crashing might make it reboot and continue mining. Instead, send "false\0" and it'll stop dead in its tracks.

Reply on news.ycombinator.com