News for hackers. Stuff that matters.

A comment on Backdoor in upstream xz/liblzma leading to SSH server compromise. Parent comment

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by Citizen8396 on Friday March 29, 2024 @06:26PM (#39869668)
Probably not. I did some pattern of life analysis on their email/other identifiers. It looks exactly like when I set up a burner online identity- just enough to get past platform registration, but they didn't care enough to make it look real.

For example, their email is only registered to GitHub and Twitter. They haven't even logged into their Google account for almost a year. There's also no history of it being in any data breaches (because they never use it).

Burn the witch.

[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by ancientMariner on Sunday March 31, 2024 @06:19AM (#39882962)
It would be interesting to hear the whole arc of social engineering behind getting access to the repo. Although, as a maintainer of a large-ish OSS project myself, I know that under a lot of burden any help will be welcomed with open arms, and I've never really talked about private stuff with any of them.
[ Parent | on HN ]
[dead]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by Ill_Yam_689 on Thursday April 11, 2024 @05:18AM (#40000126)
Found it by myself! https://twitter.com/JiaT03868010
[ Parent | on HN ]