News for hackers. Stuff that matters.

A comment on Backdoor in upstream xz/liblzma leading to SSH server compromise. Parent comment

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by thayne on Saturday March 30, 2024 @12:23AM (#39871817)
Do you know if it was actually the commit author, of if their commit access was compromised?
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by bpye on Saturday March 30, 2024 @12:50AM (#39871918)
If it was a compromise it also included the signing keys as the release tarball was modified vs the source available on GitHub.
[ Parent | on HN ]