Earlier quoted context omitted.
No thanks, I support an open web.
Ignoring the closed web is not the same as supporting the open web. I support whatever mirrors and tools get closed knowledge into the open. (Edited to remove snark.)
The xz sshd backdoor rabbithole goes quite a bit deeper
31–40 of 310 posts
Re: The xz sshd backdoor rabbithole goes quite a bit deeper
#32The sophistication here is really interesting. And it all got caught because of a fairly obvious perf regression. It reminds of a quote I heard in one of those "real crime" shows: "There's a million ways to get caught for murder, and if you can think of half of them, you're a genius."
Re: The xz sshd backdoor rabbithole goes quite a bit deeper
#33Re: The xz sshd backdoor rabbithole goes quite a bit deeper
#34Re: The xz sshd backdoor rabbithole goes quite a bit deeper
#35Earlier quoted context omitted.
No thanks, I support an open web.
Ignoring the closed web is not the same as supporting the open web. I support whatever mirrors and tools get closed knowledge into the open. (Edited to remove snark.)
If there's some piece of knowledge that's absolutely, positively critical to my life, it will exist somewhere that actually matters, not on Twitter.
Re: The xz sshd backdoor rabbithole goes quite a bit deeper
#36Re: The xz sshd backdoor rabbithole goes quite a bit deeper
#37The sophistication here is really interesting. And it all got caught because of a fairly obvious perf regression. It reminds of a quote I heard in one of those "real crime" shows: "There's a million ways to get caught for murder, and if you can think of half of them, you're a genius."
Maybe I’m just being naive or too trusting, but this is sort of what I think when folks are getting worried about other backdoors like this in the wild. Is it that they just got unlucky to get caught, or is this type of attack just too hard to pull off in practice? I’d like to think the later. But, we really don’t know.
Re: The xz sshd backdoor rabbithole goes quite a bit deeper
#38Luckily, thanks to Elon, we’ll never know since you haven’t have a Twitter account to view the thread.
Re: The xz sshd backdoor rabbithole goes quite a bit deeper
#39The sophistication here is really interesting. And it all got caught because of a fairly obvious perf regression. It reminds of a quote I heard in one of those "real crime" shows: "There's a million ways to get caught for murder, and if you can think of half of them, you're a genius."
Re: The xz sshd backdoor rabbithole goes quite a bit deeper
#40Without having a Twitter account I have a really hard time following these threads. Is there some write up? Edit : Check comments. Yes, the backdoor hasn't been decompiled/reverse engineered yet. But it feels like clickbait to say : "It goes deeper"... Obviously. Nobody knows what it fully does yet. There was no assumption of knowing what it did.