News for hackers. Stuff that matters.

A comment on Xzbot: Notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094). Parent comment

Re:Xzbot: Notes, honeypot, and exploit demo for the xz backd... by asveikau on Monday April 01, 2024 @06:47PM (#39900302)
This looks like a very phony "debate".

I think the most convincing case made about the sock puppets is around account creation dates, and also people disappearing after they get what they need. Like Jigar disappearing after Jia becomes maintainer. Or the guy "misoeater19" who creates his debian bug tracker account to say that his work is totally blocked on needing xz 5.6.1 to be in debian unstable.

[ Parent | on HN ]
Re:Xzbot: Notes, honeypot, and exploit demo for the xz backd... by pyinstallwoes on Tuesday April 02, 2024 @03:35AM (#39903227)
Ah, the good ol’ lever of urgency. Urgency frequency smells of deception.
[ Parent | on HN ]