288
Backdoor found in widely used Linux utility breaks encrypted SSH connections | Ars Technica (arstechnica.com)
submitted 2 years ago by to c/privacy@lemmy.ml
42 comments fedilink hide all child comments
 

TL;DR there was a backdoor found in the XZ program. All major distros have been updated but it is recommended that you do a fresh install on systems that are exposed to the internet and that had the bad version of the program. Only upstream distros were affected.

you are viewing a single comment's thread
view the rest of the comments
[–] [S] 6 points 2 years ago (6 children)

I honestly think BSD has the potential to be worse due lack of people. I think the best option is to not be paranoid as a user. If someone needs to be paranoid it is the maintainers.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 1 point 2 years ago (5 children)

    I think the best option is to not be paranoid as a user.

    Yeah, just never be a dissident, or a whistleblower, or an activist, or a member of a vulnerable marginalized group. Remember, if you obey there's no reason to fear being spied on.

    I really don't think you understand how serious this kind of backdoor is. It puts certain people in real danger.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 1 point 2 years ago (1 child)

    And I don't think you understand OPs point. Of course you should be paranoid as a person like that, but most users aren't targets. If you, as a regular user, get this paranoid about using computers, maybe you should evaluate your priorities.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 2 years ago

    If you, as a regular user, get this paranoid about using computers, maybe you should evaluate your priorities.

    "Regular user" seems to be a strange counter to all the people I just listed that would be affected here. I'm not worried about myself, I'm worried about the people whose privacy and security is extremely important in this context.

  • permalink
  • fedilink
  • source
  • parent
  • [–] [S] -1 points 2 years ago (2 children)

    These people do not seem to be affected unless they run Arch for some reason.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •