News for hackers. Stuff that matters.
Re:XZ backdoor: "It's RCE, not auth bypass, and gated/unrepl... by ecshafer on Saturday March 30, 2024 @08:17PM (#39880009)
That is an interesting solution. If China, US, Russia, EU, etc all sign off and say "yep this is secure" we should trust it. Since if they think they found an exploit, they might assume the other people found an exploit. This is a little bit like the idea of a fair cut for a cake. If you have two people that want the last slice of cake, you have one cut and the other choose the first slice, since the chooser will choose the biggest slice, so the slicer knowing they will get the smaller will make it as equal as possible. In this case the NSA makes the cut (the code), and Russia / China chooses if its allowed in.
Re:XZ backdoor: "It's RCE, not auth bypass, and gated/unrepl... by Muromec on Sunday March 31, 2024 @12:41AM (#39881509)
NSA makes the cut and China picks the public key to use.

In all seriousness, those people will quickly find some middle ground and will just share keys with each other

Re:XZ backdoor: "It's RCE, not auth bypass, and gated/unrepl... by bee_rider on Sunday March 31, 2024 @03:23PM (#39887227)
Maybe also throw EFF into the mix.