News for hackers. Stuff that matters.

A comment on Backdoor in upstream xz/liblzma leading to SSH server compromise. Parent comment

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by salamandar on Saturday March 30, 2024 @12:04PM (#39876113)
According to Webarchive, https://tukaani.org/contact.html changed very recently (between 11/02/2024 and 29/02/2024) to add Lasse Collin's PGP key fingerprint. That timing is weird, considering his git activity at that time is almost non existent. Although, i checked, this key existed back in 2012.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by Denvercoder9 on Saturday March 30, 2024 @09:02PM (#39880330)
> considering his git activity at that time is almost non existent

Are you looking at the same repositories I am? He's made 88 commits to xz in that time period, two-thirds of the total.

[ Parent | on HN ]