ancientMariner
Re:Backdoor in upstream xz/liblzma leading to SSH server compromise
on Sunday March 31, 2024 @06:19AM (#39882962)
It would be interesting to hear the whole arc of social engineering behind getting access to the repo. Although, as a maintainer of a large-ish OSS project myself, I know that under a lot of burden any help will be welcomed with open arms, and I've never really talked about private stuff with any of them.
Re:Backdoor in upstream xz/liblzma leading to SSH server compromise
on Sunday March 31, 2024 @06:14AM (#39882942)
Zoner is a Finnish web hosting company, which has a history of providing hosting for Finnish open source projects, and the original maintainer (and most of the original crew) is Finnish as well. Nothing weird here.