Backdoor in upstream xz/liblzma leading to SSH server compromise

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by anonymous-panda on Friday March 29, 2024 @06:49PM (#39869869)

Don’t know all the details and rust isn’t immune to a build attack, but stuff like that tends to stand out a lot more I think in a build.rs than it would in some m4 automake soup.

[ Parent | on HN ]

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by minetest2048 on Friday March 29, 2024 @07:12PM (#39870061)

There was a drama back then where serde tried to ship its derive macro as a precompiled binary: https://news.ycombinator.com/item?id=37189462

[ Parent | on HN ]