Dan Draper nag-retweet

I tried to make sense of the backdoor mechanism this time and summarized it in a one-page overview. 😵💫
There's obviously more technical detail to uncover, but you'll get a general understanding of the complexity and the stealthy mechanisms used to remain undetected. 🧐
Thanks to @AndresFreundTec for his insight into this and a shoutout to these researchers if you want to learn more about the backdoor 🙏👇
- gist.github.com/smx-smx/a6112d… by SMX
- bsky.app/profile/filipp… by @FiloSottile
- github.com/amlweems/xzbot by @amlweems
- github.com/karcherm/xz-ma… by Karchem
- research.swtch.com/xz-script by Russ Cox
- github.com/0xlane/xz-cve-… by 0xlane
And of course, all the others previously mentioned and those who contributed to the analysis. #xz #infosec

English


















