@wolfiechristl
https://www.iccl.ie/digital-data/australias-hidden-security-crisis/
| Personal (ITA) | https://www.saccani.net |
| Company (ENG) | https://www.libraesva.com |
Over Half (55%) of US IT and Security Professionals Surveyed Not Prioritizing Email Security, Despite Almost 9 in 10 (88%) Experiencing Successful Attacks in the Last Quarter | Business Wire
xz/liblzma: Bash-stage Obfuscation Explained, https://gynvael.coldwind.pl/?id=782.
"The maintainers of libcolorpicker.so can’t be the only thing that stands between your critical infrastructure and Russian or Chinese intelligence services"
https://lcamtuf.substack.com/p/oss-backdoors-the-allure-of-the-easy/?1
OK, so here's my slightly more eloquent take on the xz thing, complete with a zinger closing paragraph:
https://lcamtuf.substack.com/p/technologist-vs-spy-the-xz-backdoor
https://boehs.org/node/everything-i-know-about-the-xz-backdoor
I have begun a post explaining this situation in a more detailed writeup. This is updating in realtime, and there is a lot still missing.
Just a backdoor in XZ. Nothing important. https://www.openwall.com/lists/oss-security/2024/03/29/4