Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Wait, people still download unsigned exes from PHP-era websites in 2026? And then act surprised when the download link starts pointing to malware?

At this point if your software isn't distributed through a repo with verifiable builds, you're basically running a malware lottery for your users. The only question is when, not if.

CPUID got lucky it was only 6 hours. Imagine if the attackers had better taste in filenames than "HWiNFO_Monitor_Setup.exe" lmao



> PHP-era

PHP-era is still today




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: