XPost: alt.comp.os.windows-10   
   From: bugsy@zimage.comBUGSY   
      
   "Carlos E.R."  wrote:   
      
   > Bad actor probably paid by some country or mafia with money and resources.   
   >   
   > https://lcamtuf.substack.com/p/technologist-vs-spy-the-xz-backdoor   
      
   Very sophisticated. Their grand scheme was:   
      
   1) sneakily backdoor the release tarballs, but not the source code   
      
   2) use sockpuppet accounts to convince the various Linux distributions to   
   pull the latest version and package it   
      
   3) once those distributions shipped it, they could take over any downstream   
   user/company system/etc   
      
      
   https://arstechnica.com/security/2024/04/what-we-know-about-the-   
   z-utils-backdoor-that-almost-infected-the-world/   
   --   
   Please wear your mask!   
   Bugs are everywhere. :)   
      !__!   
     (@)(@)   
    \.'||'./   
   -:  ::  :-   
   /'..''..'\   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)