Mike Shewardpeople are saying the xz backdoor is likely the work of a nation state actor, and given that it appears to been slow rolled for a couple of years and immediately became obsolete before it was fully launched - you do have to admit it bears the hallmarks of a government IT project
Paul Cantrell@SecureOwl @marcan
It’s true! If this had been authored by the private sector, it would have been started and killed 6 times across 3 different teams, released before it was ready, then suddenly sold off and killed by a capricious C-level who heard that something else is the new hotness now.
Kevin P. Fleming