from Hacker News

No Python interpreter? this simple RAT installs its own copy

by wolframio on 4/9/21, 10:25 AM with 61 comments

• by css on 4/9/21, 1:47 PM

  CD Projekt's GoG client has a feature where users can write Python extensions [0] for third party account integrations. To enable this, they ship an entire Python interpreter alongside the app binary [1]. I guess this kind of makes sense, it is way easier than having users manage their own `venv`s and other Python environment stuff. Packaging Python apps for distribution outside of a Python development context is quite pesky.

  [0]: https://github.com/gogcom/galaxy-integrations-python-api

  [1]: https://support.gog.com/hc/en-us/articles/360024812473-GOG-G...

• by ShaneMcGowan on 4/9/21, 3:57 PM

  Loving how it also downloads the license.txt file. Very important to respect license agreements when compromising someone's machine

• by tyingq on 4/9/21, 3:19 PM

  That's how dropbox works as well, and the interpreter is a custom one that reads encrypted opcodes from the pyc files.

• by jpfed on 4/9/21, 4:59 PM

  Yes, well, at least it's Python 3.