The xz attack shell script

Re:The xz attack shell script by bsza on Wednesday April 03, 2024 @01:27AM (#39913886)

This kind of demonstrates my point. Every single one of these headlines indicates the bad actor has been "charged" (with serious consequences in the case of Huawei).

Has Jia Tan been "charged" with anything?

[ Parent | on HN ]

Re:The xz attack shell script by nindalf on Wednesday April 03, 2024 @01:50AM (#39914042)

I’m gonna cry survivorship bias here. How do we know how many similar attempts succeeded?

[ Parent | on HN ]

Re:The xz attack shell script by bsza on Wednesday April 03, 2024 @09:51AM (#39917473)

Right, we don’t know that, but we have yet to hear of one case where a supply chain attack on a FOSS project resulted in someone getting arrested.

[ Parent | on HN ]