News for hackers. Stuff that matters.

A comment on Backdoor in upstream xz/liblzma leading to SSH server compromise. Parent comment

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by 5p4n911 on Friday March 29, 2024 @04:03PM (#39868413)
Probably China is the least probable suspect, I think an added layer of obfuscation would not hurt for an agency with the goals of compromising xz in a few years. Though I'm not a malicious actor and I don't work in intelligence so take this with a big grain of salt.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by mrb on Friday March 29, 2024 @04:10PM (#39868472)
Brand new anon HN account created 17 minutes ago to defend China? Hmm, suspicious :-)
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by wyldberry on Friday March 29, 2024 @04:24PM (#39868613)
Plus China does not care about obfuscation. They smash and grab and then deny, deny, deny + counter accuse.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by wyldberry on Friday March 29, 2024 @05:24PM (#39869178)
I love that i get downvoted on this immediately like I haven't worked IR cases from CN threat actors that did just this.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by adamrezich on Friday March 29, 2024 @07:09PM (#39870029)
To be fair, if I worked for the responsible state and it wasn't China, then this is what I would do to deflect…
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by rpigab on Friday March 29, 2024 @04:43PM (#39868793)
Yeah, could be Venezuela. Though I'm not trying to make random statements to create uncertainty and doubt, so take this with a gigantic grain of salt.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by fooker on Friday March 29, 2024 @05:05PM (#39869005)
> Though I'm not a malicious actor

Yeah, the actor part seems unnecessary now.

[ Parent | on HN ]