News for hackers. Stuff that matters.

A comment on XZ backdoor story – Initial analysis. Parent comment

Re:XZ backdoor story – Initial analysis by jamespo on Saturday April 13, 2024 @05:07AM (#40021666)
The VPN is just part of the picture (sock puppet accounts complaining about speed of dev, no meaningful history of other contributions from the dev, no trusted "personal network" for the dev, etc) that in hindsight should have raised red flags.
[ Parent | on HN ]
Re:XZ backdoor story – Initial analysis by markhahn on Saturday April 13, 2024 @10:59AM (#40023551)
new project idea: OpenBackgroundCheck

volunteer osint researchers attempt to dox any identity you submit, so you can know whether they're the Right Kind of OSS contributor or not.

/s

[ Parent | on HN ]
Re:XZ backdoor story – Initial analysis by xcrunner529 on Sunday April 14, 2024 @01:05AM (#40028795)
If they constantly are on a VPN and not willing to disclose a real location or IP then I fail to see why they should be trusted when they don’t provide anything trustworthy themselves.
[ Parent | on HN ]