XZ backdoor: "It's RCE, not auth bypass, and gated/unreplayable."

Re:XZ backdoor: "It's RCE, not auth bypass, and gated/unrepl... by computerfriend on Sunday March 31, 2024 @12:31AM (#39881461)

I sometimes ask this as an interview question. Hardly anybody knows the answer.

[ Parent | on HN ]

Re:XZ backdoor: "It's RCE, not auth bypass, and gated/unrepl... by sureglymop on Sunday March 31, 2024 @02:02AM (#39881831)

So don't you want to enlighten us with the answer?

[ Parent | on HN ]

Re:XZ backdoor: "It's RCE, not auth bypass, and gated/unrepl... by computerfriend on Sunday March 31, 2024 @02:48PM (#39886905)

The enlightenment has happened in the other comments, but the summary is:

* this enforces high entropy,

* the password is transmitted to the server, the private key is not.

[ Parent | on HN ]