Yeah it sounds pretty wild already with some kind of, like, door knock mechanism using certificates? So you can’t scan for it. And some reverse engineering countermeasures.
Like everyone else, I have to wonder what libraries have been compromised in a way that nobody has noticed yet.
Very annoying - the apparent author of the backdoor was in communication with me over several weeks trying to get xz 5.6.x added to Fedora 40 & 41 because of it’s “great new features”. We even worked with him to fix the valgrind issue (which it turns out now was caused by the backdoor he had added). We had to race last night to fix the problem after an inadvertent break of the embargo.
He has been part of the xz project for 2 years, adding all sorts of binary test files, and to be honest with this level of sophistication I would be suspicious of even older versions of xz until proven otherwise.
Damn. I would love to see a full post mortem on this compromise.
Well maybe they aren’t experienced info security professionals :)
I think you win.
If you haven’t yet, give Lief Ove Andsnes’ rendition a try.
Everyone has their favorite interpretations, I guess. This is one of mine. From a pianist that impressed the hell out of me when I first heard him.
(The album Horizons if the link doesn’t work or you’re boycotting Spotify or whatever)
God I am getting crazy goosebumps just listening to this again. I love the 9th symphony so much.
Oh wow that is amazing. Thank you!
I forgot how much I love this kind of choral music.
Yeah she does.
I get where you’re coming from but is he managing his risk or not?
Does he understand the risk? If yes, good. No? Bad.
Is he ignoring the risk? If yes, bad. No? Good.
Is he weighing the risks against the benefits he receives of using these apps and taking appropriate steps to mitigate those risks? If yes, then good. No? Bad.
Cyber security isn’t “lock everything down at all costs”. Otherwise I would insist you throw your phone in an incinerator along with all your computers, live in a bunker reinforced against nuclear attack with a small army to guard you, never leave it, never talk to anyone… Etc.
It is enabling one to achieve their goals with a tolerable amount of risk. That level of tolerable risk is different for everyone.
Right? I guess by saying the hard N word. I’m so fucking fed up with bigots, I tell ya.
Who cares. Let’s focus on what’s actually important here: racist shitbags.
Yup. Always. They can’t see that everyone doesn’t think and act like them.
I guess deflecting/projecting is a common manipulation technique that slimebags learn.
If the first one didn’t convince 'em, I am not sure anything will, including a 20 year dictatorship complete with death squads and final solutions.
It won’t be hard when all oversight is gutted or populated with members of Trump’s Mafia. Once they have enough control they can ensure they always win future elections. Sort of like Putin does.
And sure bears uncanny resemblance to the antichrist (who IIRC was based on some asshole Roman Caesar or something… Who was probably a crooked, narcissistic piece of shit like DT)
I blame greed. Again.
The ethics matter McCarthy referred to pertains to an investigation into Gaetz dating back to 2021, which alleged that, according to The New York Times, “he engaged in sexual misconduct and illicit drug use, shared inappropriate images or videos on the House floor, misused state identification records, converted campaign funds to personal use and accepted impermissible gifts under House rules, among other allegation.”
So Gaetz asked McCarthy to shut down the ethics investigation into all this, which totally sounds like something that an innocent, honest, upstanding person would do. /s
Sounds like a job for our counter intelligence services…right? Or do they just sit on their thumbs and do fuckall like they have since 2016 while this worthless gasbag mobster sells the country out from under us?
His followers would think it is a compliment. Or just beat you for using “them fancee ass collijj werds”
I have a feeling there are a lot of busy people trying to answer that question, now. Yikes.