Live data from Hacker News

The xz sshd backdoor rabbithole goes quite a bit deeper

twitter.com

21–30 of 310 posts

Re: The xz sshd backdoor rabbithole goes quite a bit deeper

#22
post #5
post #2

Luckily, thanks to Elon, we’ll never know since you haven’t have a Twitter account to view the thread.

Change "twitter" to "twiiit" to get a random nitter instance: https://twiiit.com/bl4sty/status/1776691497506623562

I thought nitter was officially dead. Nice to see some instances are still working

Re: The xz sshd backdoor rabbithole goes quite a bit deeper

#23

The sophistication here is really interesting. And it all got caught because of a fairly obvious perf regression. It reminds of a quote I heard in one of those "real crime" shows: "There's a million ways to get caught for murder, and if you can think of half of them, you're a genius."

> "There's a million ways to get caught for murder, and if you can think of half of them, you're a genius."

Does "think of half" apply to the folks trying to solve murders?

Re: The xz sshd backdoor rabbithole goes quite a bit deeper

#24
post #5

Earlier quoted context omitted.

Change "twitter" to "twiiit" to get a random nitter instance: https://twiiit.com/bl4sty/status/1776691497506623562

No thanks, I support an open web.

Ignoring the closed web is not the same as supporting the open web. I support whatever mirrors and tools get closed knowledge into the open.

(Edited to remove snark.)

Re: The xz sshd backdoor rabbithole goes quite a bit deeper

#25
post #5
post #2

Luckily, thanks to Elon, we’ll never know since you haven’t have a Twitter account to view the thread.

Change "twitter" to "twiiit" to get a random nitter instance: https://twiiit.com/bl4sty/status/1776691497506623562

Oh. Nitter didn't stop working a few weeks ago after all?

Oops, now that's giving:

    Instance has been rate limited.
    Use another instance or try again later.
So maybe "kind of working" is the better description. :)

Re: The xz sshd backdoor rabbithole goes quite a bit deeper

#27
post #14

The weird thing about this one is how it seems super professional in some ways, and rather amateur in others. Professional in the sense of spending a long time building up an identity that seemed trustworthy enough to be made maintainer of an important package, of probably involving multiple people in social manipulation attacks, of not leaking the true identity and source of the attack, and the sophistication and ob…

[dead]

Re: The xz sshd backdoor rabbithole goes quite a bit deeper

#28
post #14

The weird thing about this one is how it seems super professional in some ways, and rather amateur in others. Professional in the sense of spending a long time building up an identity that seemed trustworthy enough to be made maintainer of an important package, of probably involving multiple people in social manipulation attacks, of not leaking the true identity and source of the attack, and the sophistication and ob…

There are thousands of ways that performance can be impacted. No matter how good you are at developing, there will be a workload that would have a performance hit. Phoronix has been several times reporting issues to the Linux kernel because performance regression with their test suite. Performance tests tend to take more time than correctness tests.

Re: The xz sshd backdoor rabbithole goes quite a bit deeper

#30
post #5
post #2

Luckily, thanks to Elon, we’ll never know since you haven’t have a Twitter account to view the thread.

Change "twitter" to "twiiit" to get a random nitter instance: https://twiiit.com/bl4sty/status/1776691497506623562

Aren't all the nitter instances going to die with the anonymous guest account restrictions? I've not closely followed those developments.
Post reply on HN