How to spear phish HN readers:<p>1) Convince them to install crapware* into their browser using basic-but-real functionality. Useful keywords: vi, solarized, dark mode, ad blocker.<p>2) Wait one month.<p>3) Ship your C&C backdoor via whatever autoupdate mechanism you put into place and see who phones home.<p>* This tool binary-patches your local system rather than shipping via AMO. That’s not healthy.