News for hackers. Stuff that matters.

A comment on Backdoor in upstream xz/liblzma leading to SSH server compromise. Parent comment

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by oceanplexian on Friday March 29, 2024 @06:53PM (#39869896)
Yeah I worked in FAANG when we got the advance notice of a number of CVEs. Personally I think it's shady, I don't care how big Amazon or Google is, they shouldn't get special privileges because they are a large corporation.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by kelnos on Saturday March 30, 2024 @01:54AM (#39872203)
I don't think the rationale is that they are a large corporation or have lots of money. It's that they have many, many, many more users that would be affected than most companies have.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by sdenton4 on Saturday March 30, 2024 @08:34AM (#39874236)
I imagine they also have significant resources to contribute to dealing with breaches - eg, analysing past cookouts by the bad actor, designing mitigations, etc.
[ Parent | on HN ]