News for hackers. Stuff that matters.

A comment on Backdoor in upstream xz/liblzma leading to SSH server compromise. Parent comment

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by EasyMark on Saturday March 30, 2024 @12:58AM (#39871953)
they might not have been playing the long con. maybe approached by actors willing to pay them a lot of money to try and slip in a back door. I'm sure a deep dive into code contributions would clear that up for anyone familiar with the code base and some free time.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by bobba27 on Saturday March 30, 2024 @04:43AM (#39872985)
They did fuck up quite a bit though. They injected their payload before they checked if oss-fuzz or valgrind or ... would notice something wrong. That is sloppy and should have been anticipated and addressed BEFORE activating the code.

Anyway. This team got caught. What are the odds that this state-actor that did this, that this was the only project / team / library that they decided to attack?

[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by account42 on Thursday April 04, 2024 @04:42AM (#39927927)
Using sockpuppets to pressure the original maintainer into granting commit access in the first place backs the long con theory.
[ Parent | on HN ]