#xzbackdoor ... Wow. Four weeks to notice, only hours to fix and a day(?) to deploy. #opensource, #debian, #suse, #redhat, #linux : You Rock! We Rock! Dont tell that to #Microsoft #Apple #Cisco #Ivanti #Fortinet or the like, they will cry.
Another thought:
The attackers needed probably more than one man year to create, replace and hide the backdoor. It took one performance nerd at Microsoft (and PostgreSQL) and few days to take down the threat. That is
#AsymmetricalWarfare in #opensource #cybersecurity. So powerful.