Untitled attachment

Notices where this attachment appears

1. Embed this notice
   Gea-Suan Lin (gslin@abpe.org)'s status on Saturday, 30-Mar-2024 10:07:07 JST Gea-Suan Lin

   https://www.openwall.com/lists/oss-security/2024/03/29/4

   https://news.ycombinator.com/item?id=39865810

   睡醒打開電腦就發現 xz 被下蠱的消息，而且是埋了兩年的 social engineering (這麼刺激？)：

   He has been part of the xz project for 2 years, adding all sorts of binary test files, and to be honest with this level of sophistication I would be suspicious of even older versions of xz until proven otherwise.