News for hackers. Stuff that matters.

A comment on Xzbot: Notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094). Parent comment

Re:Xzbot: Notes, honeypot, and exploit demo for the xz backd... by saagarjha on Wednesday April 03, 2024 @05:49AM (#39915323)
It's the symbol lookup that's slow.
[ Parent | on HN ]
Re:Xzbot: Notes, honeypot, and exploit demo for the xz backd... by 400thecat on Wednesday April 03, 2024 @07:47AM (#39916187)
why does the backdoor rely on symbol lookup? is it because of the use of IFUNC ?
[ Parent | on HN ]
Re:Xzbot: Notes, honeypot, and exploit demo for the xz backd... by saagarjha on Wednesday April 03, 2024 @09:38AM (#39917309)
I believe it is looking for functions in OpenSSH that do key validation etc
[ Parent | on HN ]