News for hackers. Stuff that matters.

A comment on Backdoor in upstream xz/liblzma leading to SSH server compromise. Parent comment

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by supposemaybe on Friday March 29, 2024 @06:57PM (#39869935)
Remember that agencies like NSA, GCHQ etc will always use false flags in their code, even when it doesn’t have as high risk of exposure as a backdoor in public has.

Looking at the times of commits shouldn’t be given much value at all. A pretty pointless endeavour.

[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by astrange on Saturday March 30, 2024 @04:22AM (#39872907)
State actors are actually known for not doing that; after all, there's no need to hide when what you're doing is legal. They also tend to work 9-5 in their own timezones.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by account42 on Thursday April 04, 2024 @10:13AM (#39930677)
It might be legal but would (or at least should) be seen as an attack by all other countries using the software, even allies, and in a saner world wouldl receive a strong political response.
[ Parent | on HN ]