News for hackers. Stuff that matters.

A comment on XZ backdoor: "It's RCE, not auth bypass, and gated/unreplayable.". Parent comment

Re:XZ backdoor: "It's RCE, not auth bypass, and gated/unrepl... by sureglymop on Sunday March 31, 2024 @02:02AM (#39881831)
So don't you want to enlighten us with the answer?
[ Parent | on HN ]
Re:XZ backdoor: "It's RCE, not auth bypass, and gated/unrepl... by computerfriend on Sunday March 31, 2024 @02:48PM (#39886905)
The enlightenment has happened in the other comments, but the summary is:

* this enforces high entropy,

* the password is transmitted to the server, the private key is not.

[ Parent | on HN ]