Feed on
Posts
Comments

Monthly Archive for April, 2024

Every kind of mind

The backdoor in xz utils was found by a person who noticed half a second. That says something about what kinds of people a security team needs. Many organisations recruit for the same profile. Social, quick, good at presenting and selling ideas. Those people are important. Someone has to explain to management why the budget […]

Read Full Post »

At the end of March, a developer noticed that his SSH logins took about half a second longer than they should. Most of us would have shrugged. He didn´t. He investigated, and found a backdoor deliberately planted in xz utils, a compression library used in almost every Linux distribution. It had been inserted by a […]

Read Full Post »