Backdoor in upstream xz/liblzma leading to SSH server compromise

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by megous on Saturday March 30, 2024 @11:11AM (#39875583)

Yeah, another of the reasons not to host anything on Github but optional git mirrors, if you don't want your FOSS project to be subject to Microsoft playing a "world police".

[ Parent | on HN ]

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by junon on Saturday March 30, 2024 @12:23PM (#39876261)

Don't agree here. I've only ever seen GitHub do this in extreme circumstances where they were absolutely warranted.

[ Parent | on HN ]

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by megous on Saturday March 30, 2024 @02:33PM (#39877394)

You mean like when they banned all people from wirte access who didn't want to jump to their 2FA bandwagon?

[ Parent | on HN ]