The Mystery of ‘Jia Tan,’ the XZ #Backdoor Mastermind - https://www.wired.com/story/jia-tan-xz-backdoor/ "The thwarted XZ Utils supply chain attack was years in the making. Now, clues suggest nation-state hackers were behind the persona that inserted the malicious code." another reason for governments to support #opensource properly
@glynmoody
Suggesting that a nation-state was behind this hack implicitly discounts the possibility that there are unscrupulously self-interested private-sector actors.
@glynmoody
I agree with "more likely" but, although nation-states and private big tech companies may have a common interest in breaching users' security, there is at least one big tech company that has historically seen Linux as an existential threat, and acted to compromise it persistently over decades. So although the number of potential bad actors in the private sector may be smaller than the number of nation-states, the former number is not zero.
@glynmoody timezone inferences like these are why Sharesite in Freenet / Hyphanet chooses a random hour of the day when the Sharesite is created and only uploads during that hour.
Add comment