Has anyone wondered why the CopyFail PoC is so heavily obfuscated?

That's a legit question. Isn't a PoC supposed to be clear so you know what you're trying to defend against?

@fun I thought the same, then thought they wanted to claim being such small.

@CyReVolt What's the point? You're not going to run this in an embedded environment with only 64K of SRAM available?

@fun yea I think it's unnecessary - plus, you can just extract and decompile it anyway.

@CyReVolt Yes, but it'd be easier to know if it wasn't all obfuscated.

@fun i can only guess this is to show how 1337 those hax0rs are. there's so much immature marketing in this disclosure...

@jn it's all AI generated, so yes of course there's lots of immature marketing...

"jn[?] this disclosure" :P

@fun typo ;)

@jn overall it all feels not serious at all to me. Yes, the vuln is real. But not only did they not notify any mainstream linux distro, but they have the audacity to say these distros that haven't been notified, actually have the vuln patched already which is false.

That combined with "hey our AI solution detected this based on human analysis!!" .. ugh