XZ backdoor: "It's RCE, not auth bypass, and gated/unreplayable."

Re:XZ backdoor: "It's RCE, not auth bypass, and gated/unrepl... by junon on Saturday March 30, 2024 @07:44PM (#39879784)

There's a reasonably high chance this was to target a specific machine, or perhaps a specific organization's set of machines. After that it could probably be sold off once whatever they were using it for was finished.

I doubt we'll ever know the intention unless the ABC's throw us a bone and tell us the results of their investigation (assuming they're not the ones behind it).

[ Parent | on HN ]

Re:XZ backdoor: "It's RCE, not auth bypass, and gated/unrepl... by BbzzbB on Sunday March 31, 2024 @05:13AM (#39882670)

ABC?

[ Parent | on HN ]

Re:XZ backdoor: "It's RCE, not auth bypass, and gated/unrepl... by tau255 on Sunday March 31, 2024 @05:18AM (#39882690)

3 letter intelligence agencies.

[ Parent | on HN ]

Re:XZ backdoor: "It's RCE, not auth bypass, and gated/unrepl... by aaronmdjones on Sunday March 31, 2024 @05:36AM (#39882761)

Baw, GCHQ is going to feel so left out.

[ Parent | on HN ]

Re:XZ backdoor: "It's RCE, not auth bypass, and gated/unrepl... by az226 on Sunday March 31, 2024 @05:34AM (#39882751)

NSA, CIA, FBI, DHS.

[ Parent | on HN ]

Re:XZ backdoor: "It's RCE, not auth bypass, and gated/unrepl... by ddalex on Sunday March 31, 2024 @05:29AM (#39882728)

I'd disagree, based on reports of the actor trying to get this upstreamed in Debian and Fedora. Widespread net.

[ Parent | on HN ]

Re:XZ backdoor: "It's RCE, not auth bypass, and gated/unrepl... by cmcaleer on Sunday March 31, 2024 @05:50AM (#39882825)

Classic example of this being Stuxnet, a worm that exploited four(!) different 0-days and infected hundreds of thousands of computers with the ultimate goal of destroying centrifuges associated with Iran’s nuclear program.

[ Parent | on HN ]