News for hackers. Stuff that matters.

A comment on Backdoor in upstream xz/liblzma leading to SSH server compromise. Parent comment

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by api on Friday March 29, 2024 @06:42PM (#39869810)
I’m surprised there isn’t way more of this stuff. The supply chain is so huge and therefore represents so much surface area.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by SoftTalker on Friday March 29, 2024 @10:39PM (#39871349)
There probably is. Way more than anyone knows. I bet every major project on github is riddled with state actors.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by cozzyd on Saturday March 30, 2024 @09:05AM (#39874495)
Imagine if sshd was distributed by PyPI or cargo or npm instead of by a distro.
[ Parent | on HN ]