News for hackers. Stuff that matters.

A comment on Backdoor in upstream xz/liblzma leading to SSH server compromise. Parent comment

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by IncreasePosts on Friday March 29, 2024 @04:06PM (#39868442)
It might not even be a long time. He might have just been approached exactly because of his history to insert the back door. And offered either money, or blackmailed or threatened
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by hangonhn on Friday March 29, 2024 @04:16PM (#39868531)
Oh man. The was a scenario that didn't cross my mind. I was too narrowly focused on the technical aspects rather than the social aspects of security. Great point.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by Arrath on Friday March 29, 2024 @07:14PM (#39870080)
What if this contributor was a member of a state actor/persistent threat group and, like some totally legit software dev houses, they encourage their people to contribute to OSS projects for the whole personal pursuit/enjoyment/fulfillment angle?

With the added bonus that sometimes they get to pull off a longcon like this.

[ Parent | on HN ]