Willie
Ars TechnicaBackdoor found in widely used Linux utility breaks encrypted SSH connections
Malicious code planted in xz Utils has been circulating for more than a month.
TheDarcBird@arstechnica
That will be fixed in 10..9..8..
That will be fixed in 10..9..8..
Seán Fenian@arstechnica Worse, the person who almost certainly backdoored it has been working on the xz project for two years.
robertmx@zakalwe
That is seriously bad and probably requires all those persons commits to be reverted :-/.
@arstechnica
That is seriously bad and probably requires all those persons commits to be reverted :-/.
@arstechnica
Bill Zaumen@arstechnica I just checked an up to date Pop!_OS system and that had an older version of xz not affected by this particular problem. The article I read claimed it had been found in time so that it isn't in production systems. We were lucky.
Robb Munson 
@arstechnica fuuuuuuuuuuuuckkkkkkk....*cracks open laptop I haven't used in a while and updates the fuck out of it*
Jan Ciger@Robb_Munson @arstechnica Probably a good idea to do but unless you are using bleeding edge or rolling release distros you are not affected by this. Worse, you may paradoxically pull the vulnerable code in if you do happen to use such distribution ...
@janoc200 @arstechnica you're so much of a geek you don't realize jokes exist on the Internet.
I guess I am not enough of a geek to read minds yet.
Sorry mate. That joke fell flat. 🤷♂️ Esp. for people who actually have to deal with the fallout of this backdoor.