News for hackers. Stuff that matters.

A comment on The xz-utils backdoor has been removed. Parent comment

Re:The xz-utils backdoor has been removed by TacticalCoder on Wednesday April 10, 2024 @04:52AM (#39988454)
> This commit message is gold

It's really sad to see commit messages like this, downplaying the issue. It's also concerning to see libsystemd get a free pass.

[ Parent | on HN ]
Re:The xz-utils backdoor has been removed by cowsandmilk on Wednesday April 10, 2024 @07:58AM (#39989695)
How did they get a free pass?
[ Parent | on HN ]
Re:The xz-utils backdoor has been removed by bbarnett on Wednesday April 10, 2024 @08:11AM (#39989812)
Systemd's ridiculous inability to manage daemons correctly, like every other init system on the planet, necessitated debian, redhat, and others patching ssh, just so systemd could reliably start ssh.

Which is what enabled this vulnerability to be viable.

[ Parent | on HN ]