- cross-posted to:
- programming@programming.dev
- cross-posted to:
- programming@programming.dev
They noticed that some ssh sessions took 0.5 seconds too long under certain circumstances. 😲
Holy hell that’s good QA.
Microsoft employee.
Don’t see why you’re being downvoted, the person in question who discovered this is a postgres maintainer employed by Microsoft.
This is the best post I’ve read about it so far: https://boehs.org/node/everything-i-know-about-the-xz-backdoor
In the fallout, we learn a little bit about mental health in open source.
Reminded me of this, relevant as always, xkcd:

Damn, it is actually scary that they managed to pull this off. The backdoor came from the second-largest contributor to xz too, not some random drive-by.
It would be nice if we could press formal charges
deleted by creator
Do you have a source for this?
deleted by creator
Assuming that it’s just that person, that it’s their actual name and that they’re in the US…







