96
Heartbleed and XZ Backdoor Learnings: Open Source Infrastructure Can Be Improved Efficiently With Moderate Funding (optimizedbyotto.com)
submitted 2 years ago by to c/opensource@lemmy.ml
14 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 9 points 2 years ago* (3 children)

It was a huge fluke of luck that the XZ backdoor didn’t go in any actual Linux distribution releases.

It did get into a few, just not the ones corporations are likely to be using.

  • permalink
  • fedilink
  • source
  • hideshow 3 child comments
    •
  • [–] 9 points 2 years ago (2 children)

    I doubt it would have been discovered this fast and easily if it was closed source.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 14 points 2 years ago (1 child)

    it's safe to assume there are similar issues in closed source. A big part of the snowden leaks was about how NSA could access lots of data at will. It wouldn't surprise me if they also could execute code.

    Also there is stuxnet. But I am not sure, if there were intentional backdoors, or only some "natural occuring" RCE.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •