3 ms·
> If the new contributor did it, did they become an xz maintainer with the aim of acting maliciously? Is no one asking if there was a state actor behind the co
by randmeerkat 3y ago
> If the new contributor did it, did they become an xz maintainer with the aim of acting maliciously?
Is no one asking if there was a state actor behind the contributor? My question is what was the ultimate end goal, and who motivated this exploit?
- wood_spirit 3y agoI think it is just as plausible that a state actor casts about for an account of a committer they can trivially compromise who is on one of the thousands of tired projects that can slip this kind of attack in…