This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
21 Likes
Reward
21
10
Repost
Share
Comment
0/400
TrustlessMaximalist
· 15h ago
Finally cleaned up completely, but that previous wave of misjudgments was just too funny. It took repeated confirmations to get it done.
View OriginalReply0
ser_ngmi
· 17h ago
Finally shut up, this matter has been going on long enough.
View OriginalReply0
TokenDustCollector
· 12-28 12:07
SlowMist clarified everything, but this blunder was truly exceptional.
View OriginalReply0
quietly_staking
· 12-26 10:22
SlowMist has misjudged before, it seems this matter is indeed quite complicated.
View OriginalReply0
ReverseTrendSister
· 12-26 10:21
Finally cleaned up, although there was a mix-up in the middle, but at least it's sorted out.
View OriginalReply0
NeonCollector
· 12-26 10:17
Finally, it's completely clean now. That previous scare almost gave me a heart attack.
View OriginalReply0
APY_Chaser
· 12-26 10:16
It should have been dealt with thoroughly a long time ago, but this blunder is really outrageous.
View OriginalReply0
ChainWatcher
· 12-26 10:09
SlowMist had a mix-up this time, but at least the issue was clarified, and the PostHog problem has been resolved.
View OriginalReply0
FortuneTeller42
· 12-26 10:08
Finally cleaned up, that previous wave was quite shocking.
View OriginalReply0
TradFiRefugee
· 12-26 09:59
The backdoor issue has finally been completely resolved. It should have been handled this way a long time ago.
Trust Wallet浏览器扩展完全移除后门,彻底清除PostHog代码
【比推】慢雾安全团队创始人最近发声,Trust Wallet浏览器扩展的最新版本已经彻底解决了之前的后门漏洞问题,相关的PostHog代码已完全删除干净。
事实上,这次确认前还有个小插曲。由于早期的信息来源数据出现偏差,导致安全分析时误判了PostHog代码的清理情况,以为还残留着风险。经过进一步核实后才确认问题已彻底解决。
为了让大家了解背景,PostHog是一个开源的全链路产品分析平台,主要用于数据采集和分析工作。此前Trust Wallet浏览器扩展的2.68.0版本确实存在过利用PostHog的后门风险。如今随着新版本的发布,这个安全隐患已经彻底清除,用户可以放心使用。