News for hackers. Stuff that matters.

A comment on Backdoor in upstream xz/liblzma leading to SSH server compromise. Parent comment

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by waynesonfire on Friday March 29, 2024 @08:35PM (#39870618)
750 commits... is xz able to send e-mails yet?
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by wyldfire on Friday March 29, 2024 @08:57PM (#39870773)
No. But if you have any centrifuges they will probably exhibit inconsistent behavior.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by shermantanktop on Friday March 29, 2024 @11:49PM (#39871683)
Maybe it’s the centrifuges which will send the mail, making the world’s first uranium-enriching spam botnet.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by lovasoa on Saturday March 30, 2024 @03:58AM (#39872796)
Yes, it sends an email containing your private key on installation.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by soraminazuki on Saturday March 30, 2024 @06:13AM (#39873438)
It's hardly surprising given that parsing is generally considered to be a tricky problem. Plus, it's a 15 years old project that's widely used. 750 commits is nothing to sneer about. No wonder the original maintainer got burned out.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by account42 on Thursday April 04, 2024 @03:55AM (#39927673)
750 is not that many commits if you follow a commit style where each independent change gets its own commit.
[ Parent | on HN ]