News for hackers. Stuff that matters.

A comment on What we know about the xz Utils backdoor that almost infected the world. Parent comment

Re:What we know about the xz Utils backdoor that almost infe... by thinkingemote on Monday April 01, 2024 @07:27AM (#39892968)
They did communicate off list and non publicly, that's as much as we know at the moment.

As an open source developer he might have received donations too from the adversary - it's reasonably common for devs to get donations to "say thanks". He might have had voice chats with them, who knows. The emails might be with LEO at the moment but I think its in the public interest for all communications to be released.

[ Parent | on HN ]
Re:What we know about the xz Utils backdoor that almost infe... by netol on Monday April 01, 2024 @07:45AM (#39893076)
It is unfortunate that Lasse Collin has been silent about what he knows about him
[ Parent | on HN ]
Re:What we know about the xz Utils backdoor that almost infe... by imglorp on Monday April 01, 2024 @08:35AM (#39893475)
If LEO is involved, they wouldn't be disclosing evidence to avoid the public interacting with suspects or possibly leapfrogging them and tipping off someone new.

In this case the public would benefit from knowing quickly who are the bad actors and what other projects they touched.

[ Parent | on HN ]
Re:What we know about the xz Utils backdoor that almost infe... by netol on Monday April 01, 2024 @09:58AM (#39894251)
This makes sense
[ Parent | on HN ]
Re:What we know about the xz Utils backdoor that almost infe... by blindfolded_go on Monday April 01, 2024 @09:41AM (#39894086)
For his own personal safety, he might not want to get on the bad side of whatever (powerful) actor was behind this exploit.
[ Parent | on HN ]
Re:What we know about the xz Utils backdoor that almost infe... by dralley on Monday April 01, 2024 @03:01PM (#39897799)
Can we not dogpile Lasse after his vacation was ruined by this. He has much bigger concerns right now than trying to export and sanitize his entire communication history with Jia.
[ Parent | on HN ]
Re:What we know about the xz Utils backdoor that almost infe... by netol on Monday April 01, 2024 @06:52PM (#39900337)
I have a lot of respect for xz's original author, I just didn't think about the legal stuff, and that sounds quite reasonable to me now.

Personally, I find it hard to subscribe to certain theories, such as the possibility of Lasse being impersonated or involved in the incident. But that doesn't mean we should dismiss them outright at this stage. (And I'm sorry if you don't like to hear that, saying this is not comfortable for me either).

[ Parent | on HN ]
Re:What we know about the xz Utils backdoor that almost infe... by account42 on Tuesday April 09, 2024 @08:39AM (#39978771)
Lamenting the lack of public information is a far cry from dogpiling on the guy.
[ Parent | on HN ]