News for hackers. Stuff that matters.
Re:XZ backdoor: "It's RCE, not auth bypass, and gated/unrepl... by wepple on Sunday March 31, 2024 @08:33PM (#39889626)
I’m not sure that attackers “win” this arms race; the cost has gone through the roof and their chance of detection constantly increases.

Indeed, defenders are often outgunned, but at a minimum we’ve pushed the level of effort way into nation-state territory, which is a good start.

Re:XZ backdoor: "It's RCE, not auth bypass, and gated/unrepl... by saagarjha on Monday April 01, 2024 @08:29PM (#39901067)
Indeed. But a lot of the effort has come from measures in areas that are much more stacked towards defenders (as it should).