XZ backdoor story – Initial analysis

Re:XZ backdoor story – Initial analysis by levleontiev on Saturday April 13, 2024 @02:48AM (#40021093)

Sorry if I trigger anyone's paranoia, but 1. who told you that it's not a state-backed attack? 2. and if 1 is true, who told it, it's not Russia staying behind it?

and if 2 is true, the KGB university alumni Kaspersky definitely is related to it.

[ Parent | on HN ]

Re:XZ backdoor story – Initial analysis by thrdbndndn on Saturday April 13, 2024 @03:05AM (#40021147)

And it's relevant to the article because?

[ Parent | on HN ]

Re:XZ backdoor story – Initial analysis by fodmap on Saturday April 13, 2024 @04:46AM (#40021555)

I suppose they say that because the article has been written by Kaspersky, and it's hosted on a server under their control?

[ Parent | on HN ]

Re:XZ backdoor story – Initial analysis by thrdbndndn on Saturday April 13, 2024 @05:08AM (#40021674)

Even let's go all the way down and say the backdoor was directly written by Kaspersky themselves, does it change the value of the content (which is purely technical analysis) anyhow?

[ Parent | on HN ]

Re:XZ backdoor story – Initial analysis by fodmap on Saturday April 13, 2024 @05:39AM (#40021792)

I suppose parent comment don't discuss the quality of the article but the theoretical danger of connecting to a server under Kaspersky control.

https://en.wikipedia.org/wiki/Kaspersky_bans_and_allegations...

[ Parent | on HN ]