Backdoor in upstream xz/liblzma leading to SSH server compromise

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by Lichtso on Friday March 29, 2024 @01:27PM (#39866696)

They might have burnt the reputation built for this particular pseudonym but what is stopping them from doing it again? They were clearly in it for the long run.

[ Parent | on HN ]

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by jethro_tell on Friday March 29, 2024 @01:49PM (#39866945)

You're assuming that it's even a single person, it's just a gmail address and an avatar with a j icon from a clip art thing.

[ Parent | on HN ]

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by Lichtso on Friday March 29, 2024 @02:10PM (#39867183)

I literally said "they", I know, I know, in English that can also be interpreted as a gender unspecific singular.

Anyways, yes it is an interesting question whether he/she is alone or they are a group. Conway's law probably applies here as well. And my hunch in general is that these criminal mad minds operate individually / alone. Maybe they are hired by an agency but I don't count that as a group effort.

[ Parent | on HN ]