Sources
Loading...
Additional media
Loading...
DeepNewz, mobile.
People-sourced. AI-powered. Unbiased News.
The xz vulnerability story reveals a sophisticated attack on the widely used software, involving manipulation of the project by a malicious developer. The attacker pressured the previous maintainer, leading to a backdoor attempt that was caught due to system slowdown. The attack was initially detected by a Microsoft engineer, highlighting the potential severity of the breach. Questions arise about other compromised projects and the level of unnoticed threats in the digital security landscape.
In case people missed it, a engineer who happened to notice a 500ms latency and had free time + skill to investigate, just disrupted an intelligence campaign running for at least a year that would have created a backdoor into most Linux systems in the world. We got really, really… https://t.co/Epm0uupb18
Saw some variations of this xz backdoor meme: "it happened in open source", "it was found by Microsoft employee, aha" aiming to put the open sourcness nature of this as part of the issue... I think this example actually show the exact opposite - why it is so important to have… https://t.co/iyF9Aecx7T
The xz utils backdoor story is absolutely wild and the fact that no major news outlet has so far reported on it shows how limited the public's understanding of digital security issues is. https://t.co/Lcz4lRvUSx
