Dominic White 🦀 on Nostr: What makes the #xzbackdoor so amazing to me isn’t the tech - is the long game and ...
What makes the #xzbackdoor so amazing to me isn’t the tech - is the long game and social aspects to weaken technical defences. Starting two years before, pressuring an unwell dev with sock puppets to take over maintenance, getting oss-fuzz changes merged to weaken detections and adding legitimate new features to encourage distros to package the new version.
Published at
2024-03-30 23:02:16Event JSON
{
"id": "1be557809215e2d4d63c3b69967856b4d70e2d8c5ec316df8f5ae67eb7f4a2b6",
"pubkey": "ea7efd1b051cb251280a45f7199af8f5141fa28be73c77477b30ae595d3c138d",
"created_at": 1711839736,
"kind": 1,
"tags": [
[
"t",
"xzbackdoor"
],
[
"proxy",
"https://chaos.social/users/singe/statuses/112187128986790930",
"activitypub"
]
],
"content": "What makes the #xzbackdoor so amazing to me isn’t the tech - is the long game and social aspects to weaken technical defences. Starting two years before, pressuring an unwell dev with sock puppets to take over maintenance, getting oss-fuzz changes merged to weaken detections and adding legitimate new features to encourage distros to package the new version.",
"sig": "1991e0f60fbf718d3348329ec8aacda615a37450dd5b8e4512eae390e37a53c66ec425c82a3cf191055749a6efb7a08d62dcac86b724fc07d5ba835a68ddca38"
}
