News for hackers. Stuff that matters.

A comment on Backdoor in upstream xz/liblzma leading to SSH server compromise. Parent comment

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by treflop on Saturday March 30, 2024 @01:56AM (#39872210)
Having one or two people on payroll to occasionally add commits to a project isn't exactly that expensive if it pays off. There are ~29,000,000 US government employees (federal, state and local). Other countries like China and India have tens of millions of government employees.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by danieldk on Saturday March 30, 2024 @03:02AM (#39872501)
And they might as well be working on compromising other projects using different handles.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by eru on Saturday March 30, 2024 @07:56AM (#39873995)
Not all government employees are equally capable.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by EvmRoot on Saturday March 30, 2024 @12:28PM (#39876285)
Even if they contract it out, at $350/hr (which is not a price that would raise any flags), that is less that $750k. Even with a fancy office, couple of laptops and 5' monitors, this is less than a day at the bombing range or a few minutes keeping an aircraft carrier operational.

Even a team of 10 people working on this - the code and social aspect - would be a drop in the bucket for any nation-state.

[ Parent | on HN ]