XZ backdoor: "It's RCE, not auth bypass, and gated/unreplayable."

Re:XZ backdoor: "It's RCE, not auth bypass, and gated/unrepl... by intelVISA on Sunday March 31, 2024 @01:15AM (#39881650)

yep, but how to reverse such a blunder?

[ Parent | on HN ]

Re:XZ backdoor: "It's RCE, not auth bypass, and gated/unrepl... by someguydave on Sunday March 31, 2024 @08:52AM (#39883819)

Well step one is to just stop doing it? I guess someone will need to start publishing a static-only linux distro

[ Parent | on HN ]

Re:XZ backdoor: "It's RCE, not auth bypass, and gated/unrepl... by LtWorf on Sunday March 31, 2024 @04:41PM (#39887898)

I think you don't fully understand how the attack works.

Had sshd been written in go or rust, the attack would have still been possible.

[ Parent | on HN ]

Re:XZ backdoor: "It's RCE, not auth bypass, and gated/unrepl... by someguydave on Sunday March 31, 2024 @08:40PM (#39889671)

of course, I never wrote otherwise?

[ Parent | on HN ]