You are viewing a single thread.
View all comments 
97 points
Damn, it is actually scary that they managed to pull this off. The backdoor came from the second-largest contributor to xz too, not some random drive-by.
51 points
They’ve been contributing to xz for two years, and commited various “test” binary files.
60 points
18 points
34 points
*
Time to audit all their contributions although it looks like they mostly contribute to xz. I guess we’ll have to wait for comments from the rest of the team or if the whole org needs to be considered comprimised.
1 point
9 points
2 points
-2 points
*
there will be federal investigation just speculation if the culprit is a foreign actor
14 points
