GNU social JP
  • FAQ
  • Login
GNU social JPは日本のGNU socialサーバーです。
Usage/ToS/admin/test/Pleroma FE

  • Public

    • Public
    • Network
    • Groups
    • Featured
    • Popular
    • People

Embed Notice

HTML Code

Corresponding Notice

  1. Embed this notice
    Kevin Beaumont (gossithedog@cyberplace.social)'s status on Saturday, 30-Mar-2024 21:02:43 JSTKevin BeaumontKevin Beaumont
    in reply to

    Really good timeline of what is known to have happened so far. It looks like the rogue developer deliberately introduced a vulnerability in other package, too - I haven’t seen anybody else mention this.

    Reading the dev’s GitHub history, they’ve been making changes to other open source projects too around compression. It also appears they/somebody involved has other accounts, too.

    https://boehs.org/node/everything-i-know-about-the-xz-backdoor

    In conversationabout 10 months ago from cyberplace.socialpermalink

    Attachments

    1. Domain not in remote thumbnail source whitelist: boehs.org
      Everything I know about the XZ backdoor
      from Evan Boehs
      Please note: This is being updated in real time. The intent is to make sense of lots of simultaneous discoveries
  • Help
  • About
  • FAQ
  • TOS
  • Privacy
  • Source
  • Version
  • Contact

GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.

Creative Commons Attribution 3.0 All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.