Thread - Nostr Hypermedia

ODELL odell@primal.net 1 year ago

THE XZ UTILS BACKDOOR IS A STARK REMINDER THAT IF YOU RELY ON BITCOIN IT IS IMPERATIVE TO SUPPORT THE OPEN SOURCE CONTRIBUTORS THAT MAKE THIS MOVEMENT POSSIBLE. GOOD MORNING.

The Mystery of ‘Jia Tan,’ the XZ Backdoor Mastermind

The thwarted XZ Utils supply chain attack was years in the making. Now, clues suggest nation-state hackers were behind the persona that inserted th...

Replies (32)

Alex AnonymousAlex@primal.net 1 year ago

GM. Bullish on xz compression, systemd, openssh and other fee software.

MAV21 mav21@primal.net 1 year ago

GOOD MORNING ☀️

sondreolav 👀 _@sondreolav.com 1 year ago

GM ☕ @ODELL 🫂 THIS IS HOW WE WIN 🤙

The Bullish ₿itcoiner thebullishbitcoiner@thebullish.shop 1 year ago

🫡 GOOD MORNING

average_bitcoiner average@primal.net 1 year ago

Paywalled. 😐

iru@localhot $_ iru@despera.space 1 year ago

As far as I know It’s a very specific attack. You need to run a distribution that is rolling release _and_ uses the binary tarball of XZ while having the SSH system notify thing on. Its almost specifically sorts out Debian testing derivatives and Fedora. For example, Arch has the infected binary but its SSH is not linked to it. NixOS will have the 5.6.1 version but its clean because they’ve built from source instead of using the published binaries. But if you have something important running on those servers that got touched by those exploits its better to just wipe clean and redeploy those machines.

1 replies ↓

LL62 1 year ago

GM 🤠🤙 OPEN SOURCE EVERYTHING

Dominic 1 year ago

Good morning ☕️

Dan cider@nostrplebs.com 1 year ago

GM!

rsyls rsyls@primal.net 1 year ago

GM CHIEF 🫡

unit count@nostrplebs.com 1 year ago

GM

Joshua j0shua@getalby.com 1 year ago

GM☕

Cui Bono 1 year ago

GM 🫡

npub1k8t6...sytr 1 year ago

GM great reminder

Ivan Ivan@primal.net 1 year ago

@Michael Saylor

Mukesh Siddh mukesh@iris.to 1 year ago

good morning 🌞🌞

Sovereign Origin 🥕 sovereignorigin@primal.net 1 year ago

GM, wouldn't want to be a compliance officer for any major software company amirite

Sovereign Origin 🥕 sovereignorigin@primal.net 1 year ago

GM!!!

marcelo marcelo@primal.net 1 year ago

Good morning. Lots of love and respect for open source devs. This should be a no brainer. @Michael Saylor what is your opinion on this?

Adam 1 year ago

Correct. Kali was another one. Fedora rawhide, a few opensuse as well. No Debian or RHEL release

⚡₿it₿y₿it⚡ 1 year ago

GOOD MORNING. THIS IS A FRIENDLY REMINDER THAT @Michael Saylor AND #MSTR RELY ON BITCOIN. 🫂💜🤙

ODELL odell@primal.net 1 year ago

SMELLS LIKE CCP TO ME BUT YEA LIKELY A STATE OP.

GOOD MORNING (｀･ω･´)ゞ⚡おはよう

₿lank ⚡️丰 blank@primal.net 1 year ago

Support open source contributors

₿lank ⚡️丰 blank@primal.net 1 year ago

Support open source contributors View quoted note →

npub1pxpu...48r3 1 year ago

GM apathy re:bitcoin development is an attack on bitcoin

btcfringe 1 year ago

@Michael Saylor

CuznVinny cuznvinny@nostrplebs.com 1 year ago

Damn right keep the pressure on Sayler. His pockets are deeper than mine.

CuznVinny cuznvinny@nostrplebs.com 1 year ago

And whatever he says people do and believe 🤷🏽‍♂️

choss choss@nostrplebs.com 1 year ago

the Amish have been warning us for years. why didn't we listen?! 👨‍🌾

lonecoiner 1 year ago

SUPPORT THE AUTISTS

caleb caleb@zap.stream 1 year ago

I just think they're neat

An image tagged i just think they're neat

↑