AIDE through 0.19.4 can ignore hashes containing a null byte
A local user can match a stored hash up to the first 0x00 byte and hide a changed file.
3 stories, newest first · one card per story
A local user can match a stored hash up to the first 0x00 byte and hide a changed file.
A local user can hide files or directories from the integrity checker; a CVE is still pending.
AIDE^2 recursively rewrote itself for eight days and matched a strong human-engineered research agent.
Today 1.5K readers · 2.4K views · 757 reads · all time 189K views