4 ms·
Stuxnet wasn't similar to this xz backdoor. The Stuxnet creators researched (or acquired) four Windows zero-days, a relatively short-term endeavor. Whereas the
by mrb 3y ago
Stuxnet wasn't similar to this xz backdoor. The Stuxnet creators researched (or acquired) four Windows zero-days, a relatively short-term endeavor. Whereas the xz backdoor was a long-term 2.5 years operation to slowly gain trust from Lasse Collin.
But, anyway, I'm sure we can find other counter-examples.
- Repulsion9513 3y agoIf a government wants to cast a wide nest and catch what they can, they'll just throw a tap in some IXP. If a government went to this much effort to plant this vulnerability, they absolutely have targets in mind - just like they did when they went to the effort of researching (or acquiring) four separate Windows zero-days, combining them, and delivering them...
- jhugo 3y ago> a long-term 2.5 years operation to slowly gain trust from Lasse Collin Couldn't the account that committed the backdoor have been compromised recently?