Did you, did you initially kind of look for some type of chain, like a exploit chain, or is that something that just kind of emerged as you dug deeper?

Yeah.

I mean, I, I'm assuming and I'm hoping that pretty much everyone has a different, um, way to tackle a problem when it comes to reverse engineering.

But in this particular case what happened was that I didn't even wanted to, um, start with the vulnerability itself, um, because again, the, the big news was that there was supposedly active compromises.

You know, it was happening, it was, um, a done thing.

So my initial concern was if any of our customers were already impacted, right? Um, and so essentially what I did first was just building a ...

Well, the, the question that I wanted answered was can I safely check for vulnerability or for the indicators of this vulnerability, uh, within our, uh, customers' attack surfaces without, you know, having to do any sort of exploits or, uh, more of a, an active testing, right? So I just built a, a, a little sort of like probe to sort of tell, um, just how it, it happens, SSH, how it authenticates a user.

But just from a high level, could you kinda talk about the microtrick attack and, like, how that works?