4 ms·
Do you have a source for that? The backdoor was added to a minor release without a SONAME change, and generally such updates are done by distributions and not s
by Denvercoder9 2y ago
Do you have a source for that? The backdoor was added to a minor release without a SONAME change, and generally such updates are done by distributions and not something upstreams concern themselves with.
- panick21_ 2y agoIt was mentioned in the recent Oxide and Friends podcast with the guy who, discovered the backdoor. Maybe there is a link there somewhere.
- Denvercoder9 2y agoI'm not going to listen to a 1.5 hour podcast to find the exact quote, but someone must've misspoke or misunderstood. I did some searching in the meantime, but there's no evidence at all of "Jia Tan" interacting with the systemd developers. They pressured distributions to update xz-utils, but not systemd upstream.
- panick21_ 2y agoThat may be true, but that wasn't the claim. The claim was changes in upstream systemd would limit the timeline for them. Not that they had interaction with each other. The podcast is interesting either way.
- deleted 2y ago[deleted]
- throwaway7356 2y agoThe claim here was this: > "Jia Tan" was pushing hard to get systemd updated to use the new xz Which is different from your claim "changes in upstream systemd would limit the timeline for them"
- cratermoon 2y agoI can't edit my original comment, so I added the following correction https://news.ycombinator.com/item?id=40031620 https://news.ycombinator.com/item?id=40031620 Apologies for any misunderstanding.
- blueflow 2y agoYou could link the systemd issue.