1222
XZ backdoor in a nutshell (lemmy.zip)
submitted 2 years ago by to c/linux@lemmy.ml
155 comments fedilink hide all child comments
 
you are viewing a single comment's thread
view the rest of the comments
[–] 40 points 2 years ago* (1 child)

In the words of the devs in that security email, and I'm paraphrasing -

"Lots of people giving next steps, not a lot people lending a hand."

I say this as a person not lending a hand. This stuff over my head and outside my industry knowledge and experience, even after I spent the whole weekend piecing everything together.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 5 points 2 years ago*

    You are right, as you note this requires a set of skills that many don't possess.

    I have been looking for ways I can help going forward too where time permits. I was just thinking having a list of possible targets would be helpful as we could crowdsource the effort on gitlab or something.

    I know the folks in the lists are up to their necks going through this and they will communicate to us in good time when the investigations have concluded.

  • permalink
  • fedilink
  • source
  • parent