News for hackers. Stuff that matters.

A comment on Deep Dive into XZ Utils Backdoor – Columbia Engineering Guest Lecture [video].

Re:Deep Dive into XZ Utils Backdoor – Columbia Engineering G... by not_a_dane on Tuesday April 30, 2024 @05:34AM (#40208954)
looks like this is now the next-stuxnet
[ Parent | on HN ]
Re:Deep Dive into XZ Utils Backdoor – Columbia Engineering G... by xyst on Tuesday April 30, 2024 @11:26AM (#40212082)
More like a wannabe stuxnet.

Whoever was trying to get this into the wild was really sloppy in execution of an otherwise “beautiful” attack.

Stuxnet effectively put a stopgap in Iranian’s nuclear program. This backdoor could barely make it out of the alpha phase of development.

[ Parent | on HN ]
Re:Deep Dive into XZ Utils Backdoor – Columbia Engineering G... by infogulch on Wednesday May 01, 2024 @03:16AM (#40220412)
They may have been rushed. Elsewhere itt:

> A patch was ready to be introduced into Linux to prevent this type of attack (dynamically loading unneeded libraries).

[ Parent | on HN ]