4 ms·

https://news.ycombinator.com/item?id=39904034 https://news.ycombinator.com/item?id=39904034

• fmajid 3y ago
  OpenSSH is developed by the OpenBSD project and I have a lot more confidence in them than in any random "enterprise". The issue in this case is that Linux distros took it upon themselves to alter its code base by linking in libsystemd (thus also liblzma) for the dubious benefit of better systemd integration, which comes with a generous helping of attack surface.