2 ms·

Never trust Devin. Should have been clear from the first Debian-specific "improvement", which brought us the first ssh mess. systemd notifications are much easi

by rurban 3y ago

Never trust Devin. Should have been clear from the first Debian-specific "improvement", which brought us the first ssh mess. systemd notifications are much easier to get than linking to it, and thus enabling such a backdoor. Amateurs shouldnt mess with critical security infra, esp. Debian's

cpach 3y ago
What does Devin have to do with xz?
- rurban 3y ago
  Not much. He just applied the debian-specfic systemd-notify patch to ssh to enable this xz backdoor. As he did with the previous debian ssh desaster, breaking it the last time.