https://www.wired.com/story/jia-tan-xz-backdoor

Reply to this note

Please Login to reply.

Discussion

This whole operation was terrifying. Lucky it was caught at the last second but scarry this could be happening to all kinds of random libraries other projects depend on 👀

People still use IME when there's coreboot and libreboot, we must mitigate all we can. Using windows Mac os android etc is the same thing, all with known backdoors and most people don't care.

SMELLS LIKE CCP.

CCP with a dash of Klaus for flavor.

Risky business' best guess is SVR (Russia)

https://risky.biz/RB743/

Thanks for the link! Super interesting!

🙏🙏

incredible job, Andres 🥇