News for hackers. Stuff that matters.

A comment on Backdoor in upstream xz/liblzma leading to SSH server compromise. Parent comment

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by xghryro on Saturday March 30, 2024 @02:06PM (#39877132)
I suppose you think the maintainers shouldn’t have scrutinized those files? Please tell me it’s a joke.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by ab5tract on Saturday March 30, 2024 @07:32PM (#39879699)
The person who added the malicious blobs and signed the compromized archives was literally a maintainer of the project.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by account42 on Thursday April 04, 2024 @03:48AM (#39927627)
Ok, go ahead and scrutinize those files without looking at the injection code that was never in the repo? Can you find anything malicious? Probably not - it looks like random garbage which is what it was claimed to be.
[ Parent | on HN ]