News for hackers. Stuff that matters.
Re:Deep Dive into XZ Utils Backdoor – Columbia Engineering G... by xyst on Tuesday April 30, 2024 @11:26AM (#40212082)
More like a wannabe stuxnet.

Whoever was trying to get this into the wild was really sloppy in execution of an otherwise “beautiful” attack.

Stuxnet effectively put a stopgap in Iranian’s nuclear program. This backdoor could barely make it out of the alpha phase of development.

Re:Deep Dive into XZ Utils Backdoor – Columbia Engineering G... by infogulch on Wednesday May 01, 2024 @03:16AM (#40220412)
They may have been rushed. Elsewhere itt:

> A patch was ready to be introduced into Linux to prevent this type of attack (dynamically loading unneeded libraries).