News for hackers. Stuff that matters.
Re:XZ backdoor: "It's RCE, not auth bypass, and gated/unrepl... by hnarn on Saturday March 30, 2024 @05:42PM (#39878969)
What is constantly overlooked here on HN is that in legal terms, one of the most important things is intent. Commenters on HN always approach legal issues from a technical perspective but that is simply not how the judicial system works. Whether something is “technically X” or not is irrelevant, laws are usually written with the purpose of catching people based on their intent (malicious hacking), not merely on the technicalities (pentesters distributing examples).
Re:XZ backdoor: "It's RCE, not auth bypass, and gated/unrepl... by drowsspa on Saturday March 30, 2024 @06:21PM (#39879247)
Yeah, it bothers me so much. They really seem to think that "law is code".
Re:XZ backdoor: "It's RCE, not auth bypass, and gated/unrepl... by golergka on Saturday March 30, 2024 @09:29PM (#39880499)
It is code, but it runs on human wetware which can decode input about actual events into output about intent, and reach consensus about this output via proper court procedures.