News for hackers. Stuff that matters.

A comment on Backdoor in upstream xz/liblzma leading to SSH server compromise.

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by CanaryLayout on Saturday March 30, 2024 @02:18AM (#39872314)
Well isn't this an interesting commit. He finished his inject macro to compose the payload at build, so now he can start clearing up the repo so none of that shit gets seen when cruising through it.

https://git.tukaani.org/?p=xz.git;a=commitdiff;h=4323bc3e0c1...

[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by astrange on Saturday March 30, 2024 @04:09AM (#39872853)
That's not what gitignore does. I can't think of a way it would let you hide this exploit.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by zamalek on Saturday March 30, 2024 @07:55AM (#39873991)
Accidentally committing it.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by astrange on Sunday March 31, 2024 @12:06AM (#39881339)
Makes it a bit harder for sure. What actually happens if you git add something that's ignored? I assumed it would still let you do it, but never tried.
[ Parent | on HN ]