XPost: alt.comp.os.windows-10   
   From: Newyana2@invalid.nospam   
      
   "Paul"  wrote   
      
   | Both ecosystems have had supply chain attacks. There   
   | was also an attack carried out by a local university, for   
   | which Linus assigned a "permaban" on their kernel submissions.   
   | That was an attack on kernel.org . Whereas the XZ one is   
   | a more general Linux one, a test of how well the system   
   | responds to shenanigans.   
   |   
   | Windows 11 shows an "Extract from" if I highlight an XZ file.   
   | It would appear the Insider development, is already in   
   | the Release stream. All my instances of XZ are .tar.xz .   
   |   
      
     You have XZ files on Windows?   
      
      ...To my mind this is all a classic   
   case of placing the blame in the wrong place. Clearly it's a   
   problem is someone comes up with a hack of remote access   
   software. But the real problem is that software itself. Something   
   like SSH shouldn't be in use. Remote Desktop shouldn't be   
   in use. People just can't even imagine using a computer safely.   
   We want all the convenience and none of the risk. That's not   
   going to happen. So instead of opting for sensible security people   
   throw caution to the wind and then they're shocked to learn   
   that a hack has happened. Hacks are happening almost daily.   
   They're professional and borderline-military now. Yet people   
   shop and bank online, call home to check their security camera,   
   let Amazon store their credit card number... all while having   
   remote access enabled and not restricting javascript.   
      
     Some years ago my starving artist brother called me. He was   
   in a panic, explaining the "Microsoft" had called him to warn that   
   there could be repercussions because my brother had not paid his   
   Windows bill for several years. He didn't know that he was   
   supposed to. Had the bill been lost in the mail? Was Microsoft going   
   to sue him? The caller walked him through enabling remote access   
   and had him download a file. Then he took over the Desktop to   
   show my brother what they could do if he didn't pay. He was   
   horrified. They'd got him to download a remote desktop program,   
   but he didn't understand that. Luckily they were only using it   
   to scare him. My brother got through it unscathed for one reason   
   alone: He was flat broke and had never had a credit card, so he   
   couldn't pay. :)   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)