You could measure the entropy of single lines and determine if the entropy is hi... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		Severian on Nov 26, 2018 \| parent \| context \| favorite \| on: Backdoor in event-stream library dependency You could measure the entropy of single lines and determine if the entropy is high. Although you'd probably get a lot of false positive.

gnulinux on Nov 27, 2018 [–]

You can probably just measure the entropy of literals, but then an attacker might use reflection to construct arbitrary strings. Not an easy problem.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact