News for hackers. Stuff that matters.
Re:XZ backdoor: "It's RCE, not auth bypass, and gated/unrepl... by bulatb on Saturday March 30, 2024 @09:37PM (#39880530)
Smaller boundaries are likelier to need less maintenance, but nothing stands still. The reason you can run an ancient simple binary on newer systems is that someone has deliberately made that possible. People worked to make sure the environment around its boundary would stay the same instead of drifting randomly away with time—usually so doggedly (and thanklessly) that we can argue whether that stability was really a result of maintenance or just a fact of nature.
Re:XZ backdoor: "It's RCE, not auth bypass, and gated/unrepl... by asveikau on Saturday March 30, 2024 @10:30PM (#39880808)
> The reason you can run an ancient simple binary on newer systems is that someone has deliberately made that possible.

I'm not talking about binaries. I'm talking about C sources. I've done the kind of work you're talking about. You're overestimating it.

Re:XZ backdoor: "It's RCE, not auth bypass, and gated/unrepl... by bulatb on Saturday March 30, 2024 @10:46PM (#39880894)
I must have misread "plop that kind of library" as "plop that kind of binary" about five times. My bad.