News for hackers. Stuff that matters.

A comment on The xz sshd backdoor rabbithole goes quite a bit deeper. Parent comment

Re:The xz sshd backdoor rabbithole goes quite a bit deeper by d-z-m on Sunday April 07, 2024 @11:22AM (#39961359)
From my understanding, the command payload is not an RSA private key. It is an SSH certificate's public key field, a section of which contains the signed command to be executed.
[ Parent | on HN ]

There are no comments on this comment yet.