News for hackers. Stuff that matters.

A comment on XZ backdoor: "It's RCE, not auth bypass, and gated/unreplayable.". Parent comment

Re:XZ backdoor: "It's RCE, not auth bypass, and gated/unrepl... by dotancohen on Sunday March 31, 2024 @05:49AM (#39882818)
That does not sound like the type of machine that I want to work on. I still require a general purpose computer.
[ Parent | on HN ]
Re:XZ backdoor: "It's RCE, not auth bypass, and gated/unrepl... by astrange on Sunday March 31, 2024 @12:54PM (#39885858)
Why does a general purpose computer need to overwrite crypto functions in sshd?
[ Parent | on HN ]
Re:XZ backdoor: "It's RCE, not auth bypass, and gated/unrepl... by salawat on Sunday March 31, 2024 @03:17PM (#39887167)
Because it's a general purpose computer. Duh. The aim is to be able to arbitrary computations. Which overwriting crypto functions in sshd is a valid computation to be considered.
[ Parent | on HN ]
Re:XZ backdoor: "It's RCE, not auth bypass, and gated/unrepl... by astrange on Sunday March 31, 2024 @03:23PM (#39887238)
I don't think you should connect your general purpose computer to the internet then. Or keep any valuable data on it. Otherwise other people are going to get to perform computations on it.
[ Parent | on HN ]