3 ms·
No obvious need to reinstall if you didn't use ssh and expose it publicly and are not a politically important person. All signs suggest that it was a nation sta
by msm_ 3y ago
No obvious need to reinstall if you didn't use ssh and expose it publicly and are not a politically important person. All signs suggest that it was a nation state attack, and you are likely not a target.
- jcalvinowens 3y agoWe'll see... given that sshd is just one of many possible argv[0] it may have choosen to act on, I'm going to be a little paranoid until it's been fully analyzed. It just takes half an hour to reinstall, I have some shows to catch up on anyway :)
- frenchman99 3y agoI was thinking about reinstalling, because I'm on Manjaro Linux, which has the version in question. But it's unclear if earlier versions are also vulnerable. And if it did nasty things to your machine, how do you make sure that the backups you have do not include ways for the backdoor to reinstate itself?
- jcalvinowens 3y agoSure, the backdoor could have e.g. injected an libav exploit into a video file to re-backdoor my system when I watch it... that's too paranoid for me. I don't backup the whole system, just a specific list of things in /home.