3 ms·
On the contrary. This was detected before it reached major distributors. The only major one hit by this was homebrew, but they have never understood security a
by daghamm 3y ago
On the contrary.
This was detected before it reached major distributors. The only major one hit by this was homebrew, but they have never understood security anyway.
- FireBeyond 3y ago> The only major one hit by this was homebrew, but they have never understood security anyway. MacOS doesn't ship with sshd running out of the box, and vanishingly few people ever enable it.
- daymanstep 3y agoThat's not the issue here. The xz backdoor author could have used the same technique to hijack any application that linked to xz, not just sshd.
- soraminazuki 3y ago> The only major one hit by this was homebrew, but they have never understood security anyway. Do you have any evidence that other distros wouldn't have done the same? What measures do other distros have in place that would've stopped the inclusion of the backdoor had they not been alerted at the right time?