420

The glass is NOT half full (libranet.de)

submitted 5 months ago by [email protected] to c/[email protected]

43 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[-] [email protected] 3 points 5 months ago

Is there an article about that, I would like to read some more about this topic😊

[-] [email protected] 2 points 5 months ago* (last edited 5 months ago)

This is the original email by the person who discovered this backdoor. But if you want you can search for xz backdoor and you'll find a lot more articles which explain timelines and other things. https://www.openwall.com/lists/oss-security/2024/03/29/4

 == Observing Impact on openssh server ==

With the backdoored liblzma installed, logins via ssh become a lot slower.

time ssh [email protected]

before:
[email protected]: Permission denied (publickey).

before:
real	0m0.299s
user	0m0.202s
sys	0m0.006s

after:
[email protected]: Permission denied (publickey).

real	0m0.807s
user	0m0.202s
sys	0m0.006s

That's a 500ms or 0.5s difference

[-] [email protected] 2 points 5 months ago

Thanks 🙏👌✌️

this post was submitted on 16 Jan 2025

420 points (95.9% liked)

Memes

51191 readers

377 users here now

Rules:

Be civil and nice.
Try not to excessively repost, as a rule of thumb, wait at least 2 months to do it if you have to.

founded 6 years ago

MODERATORS

[email protected]