Inside the failed attempt to backdoor SSH globally - that got caught by chance - Kevin Beaumont
Inside the failed attempt to backdoor SSH globally - that got caught by chance - Kevin Beaumont
Let's keep in mind that if this is a state actor or some sort of global organized crime, then they don't put all their eggs into one basket. If that's the case, they're going to have a bunch of other plans and backdoor attempts ongoing. This isn't the end and we can assume there's something else somewhere that went unnoticed.
Security is a constantly changing war of attrition, not a goal/product/configuration.
If anything it highlights how great open source actually is when it comes to security. People saw it and immediately flagged it.
Dude, the issue was found purely by coincidence, it very nearly made it through
Lost me at suggesting that we run EDR on prod Linux servers.
Literally installing a backdoor intentionally..wow
Smug users who don't run systemd be like...
Laughs in Alpine
How does systemd solve this?
The exploit only happens in systemd
Wish I could be a fly on the walk when the bad actor realized years of work has just gone down the drain
Probably fear, then subsequently followed by their brains next to you on said wall. Whichever government paid for a multi-year campaign to backdoor enterprise Linux distributions is not going to be happy about this failure.