3 ms·
> There are very few people who can do that you’re right. What made the XZ attacker rather unique is the fact they made useful contributions at first and only
by yapyap 2y ago
> There are very few people who can do that
you’re right. What made the XZ attacker rather unique is the fact they made useful contributions at first and only turned nasty later on.
Not many people can keep a malicious campaign going on as long as the XZ attacker did which is why it’s suspected to be a nation-backed attack
- guappa 2y agoNot unique. Bitcoins were stolen with a similar technique of highjacking a js dependency of some bitcoin wallet app. It was done by doing proper contributions at first to gain control of the thing. They were even better, the library behaved completely normal when used anywhere else. xz was found because it behaved differently.
- lrvick 2y agoI mean, just look at https://milksad.info https://milksad.info for what some argue is a very long game supply chain attack. Intentionally bad entropy in the tool recommended in Mastering Bitcoin