Re:Reflections on Distrusting xz
by MattPalmer1086 on Wednesday April 03, 2024 @08:40PM
(#39925182)
Granted, other threat actors remain a possibility, there is no proof.
It looks like the sort of thing nation states would do and develop. It could be some other group hoping to make money as you say.
Whoever they are, they seem to have good opsec, over multiple years.
Why couldn't this be an attempt at finding or selling exploit access on the black market?
The problem here is no one is looking properly at the scope. It's more then trivial so everyone is leaping for "nation-state" as though that's the only threat actor with motivation and patience.