Backdoor in upstream xz/liblzma leading to SSH server compromise

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by gavinhoward on Friday March 29, 2024 @03:28PM (#39868029)

There are two points to the implementation:

* Choice. If I have a separate implementation, my users do not have to be subject to systemd's choices. And I do not either.

* The same implementation will have the same bugs, so in the same way that redundant software has multiple independent implementations, having an independent implementation will avoid the same bugs. It may have different bugs, sure, but my goal would be to test like SQLite and achieve DO-178C certification. Or as close as I could, anyway.

[ Parent | on HN ]

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by iforgotpassword on Friday March 29, 2024 @04:13PM (#39868512)

I'd assume chances of monetizing this are incredibly low. There already is an init system that understands systemd unit files, the name escapes my mind unfortunately. DO-178C might be a selling point literally, but whether there's enough potential customers for ROI is questionable.

[ Parent | on HN ]

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by gavinhoward on Friday March 29, 2024 @04:25PM (#39868622)

I unfortunately agree with you. Hence why it's on the backburner.

[ Parent | on HN ]

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by JdeBP on Saturday March 30, 2024 @07:46AM (#39873934)

Ahem!

* https://jdebp.uk/Softwares/nosh/guide/converting-systemd-uni...

[ Parent | on HN ]