News for hackers. Stuff that matters.

A comment on Backdoor in upstream xz/liblzma leading to SSH server compromise. Parent comment

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by miduil on Friday March 29, 2024 @05:45PM (#39869355)
Not true, the original author wasn't suspended: https://github.com/Larhzu

https://github.com/JiaT75 was suspended for a moment, but isn't anymore?

[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by boutique on Friday March 29, 2024 @05:48PM (#39869381)
Both are suspended for me. Check followers on both accounts, both have a suspended pill right next to their names.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by miduil on Friday March 29, 2024 @06:04PM (#39869490)
Ah, thanks for correcting me there - really weird that this isn't visible from the profile itself. Not even from the organization.

The following page for each other show both accounts suspended indeed.

https://github.com/Larhzu?tab=following

https://github.com/JiaT75?tab=following

[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by miduil on Wednesday April 03, 2024 @10:20AM (#39917870)
Lasse's account was restored
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by fargle on Friday March 29, 2024 @07:47PM (#39870294)
github should add a badge for "inject backdoor into core open source infrastructure"
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by account42 on Wednesday April 03, 2024 @07:19AM (#39915981)
Hey maybe it would get bad actors to come clean trying to get that badge.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by FridgeSeal on Friday March 29, 2024 @10:13PM (#39871216)
GitHub’s UI has been getting notoriously bad for showing consistent and timely information lately, could be an issue stemming from that.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by justinclift on Saturday March 30, 2024 @12:49AM (#39871911)
Yeah. Had a weird problem last week where GitHub was serving old source code from the raw url when using curl, but showing the latest source when coming from a browser.

Super frustrating when trying to develop automation. :(

[ Parent | on HN ]