Live data from Hacker News

The xz backdoor thing reminds me of a story

rigor-mortis.nmrc.org

11–20 of 99 posts

Re: The xz backdoor thing reminds me of a story

#12

I don't doubt that this happened, but if you use e-verify and fill in Form I-9 how does this happen? I'm in the middle of hiring an F-1 student on OPT and I need to look at his EAD and verify it's not fake according to my lawyer. So I do. Nice and easy.

It says it was a couple decades ago

Can't be that many (3?) if they made cell phones.

Re: The xz backdoor thing reminds me of a story

#13

I don't doubt that this happened, but if you use e-verify and fill in Form I-9 how does this happen? I'm in the middle of hiring an F-1 student on OPT and I need to look at his EAD and verify it's not fake according to my lawyer. So I do. Nice and easy.

Intelligence agencies can presumably mint valid SSNs along with other identity documents to use in situations like this.

They can’t forge a chipped passport unless they somehow got hold of the private key for the country’s CSCA certificate.

Re: The xz backdoor thing reminds me of a story

#15

> None of his paychecks were ever cashed I don't understand this. People were paid by cheque in the early 2000s?

Developer in the Midwest. I was paid by paper check brought to my desk by the office manager from early-aughts until 2012 when they switched to direct deposit.

Re: The xz backdoor thing reminds me of a story

#16

> None of his paychecks were ever cashed I don't understand this. People were paid by cheque in the early 2000s?

I certainly got checks at internships in 1999-2000 and at a job I briefly held in 2001. I guess my first real-real job was 2006 and for sure I got checks for at least the first few months. It was a mild pain to do the (literal) paperwork for direct deposit, and a mild pain to receive checks (I'd categorize it as a major pain now, but you were running errands more often then and even at the bank for other crap), so laziness won for a while.

Re: The xz backdoor thing reminds me of a story

#17

Earlier quoted context omitted.

Intelligence agencies can presumably mint valid SSNs along with other identity documents to use in situations like this.

They can’t forge a chipped passport unless they somehow got hold of the private key for the country’s CSCA certificate.

Doing such a thing is entirely within the purview and capability set of an intelligence agency.

Re: The xz backdoor thing reminds me of a story

#19

Earlier quoted context omitted.

Intelligence agencies can presumably mint valid SSNs along with other identity documents to use in situations like this.

They can’t forge a chipped passport unless they somehow got hold of the private key for the country’s CSCA certificate.

Why would you need to? Passports are not required to hire a person; most americans don’t even have one.
Post reply on HN