Xzbot: Notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)

Re:Xzbot: Notes, honeypot, and exploit demo for the xz backd... by anarazel on Monday April 01, 2024 @02:47PM (#39897640)

> It was reported by an MS engineer who happens to be involved in another OSS project.

I view it as being OSS or postgresql dev that happens to work at microsoft. I've been doing the former for much longer (starting somewhere between 2005 and 2008, depending on how you count) than the latter (2019-12).

[ Parent | on HN ]

Re:Xzbot: Notes, honeypot, and exploit demo for the xz backd... by est31 on Monday April 01, 2024 @06:24PM (#39900111)

Thanks for the explanation. Also thanks for catching this and protecting us all; I think in the end it's way more believable that you indeed found it on your own, above was just brainless blathering into the ether =). Lastly, thanks for your Postgres contributions.

[ Parent | on HN ]

Re:Xzbot: Notes, honeypot, and exploit demo for the xz backd... by iliane5 on Tuesday April 02, 2024 @06:34AM (#39904176)

Just wanted to say thank you for your work and attention to detail, it's immensely valuable and we're all very grateful for it.

[ Parent | on HN ]