288
Backdoor found in widely used Linux utility breaks encrypted SSH connections | Ars Technica (arstechnica.com)
submitted 2 years ago by to c/privacy@lemmy.ml
42 comments fedilink hide all child comments
 

TL;DR there was a backdoor found in the XZ program. All major distros have been updated but it is recommended that you do a fresh install on systems that are exposed to the internet and that had the bad version of the program. Only upstream distros were affected.

you are viewing a single comment's thread
view the rest of the comments
[–] 42 points 2 years ago (1 child)

They mean a variant you use in a stable, like to run an automatic feeder for horses. According to Ars Technica, however, you are not to use it in your production stable.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 12 points 2 years ago

    Yeah, screw em. I use mine to produce lots of stuff.
    I try to avoid producing too much manure though.

    I think lots of IT people have an extremely limited experience of what it is to produce something.
    I mean if opening a ssh hole to the whole world to fuck with is an important part of what they consider "production" - well I'm not really into those types of websites.

  • permalink
  • fedilink
  • source
  • parent