Kaspersky analysis of the backdoor in XZ
Kaspersky analysis of the backdoor in XZ
Kaspersky analysis of the backdoor recently found in XZ, which is used in many popular Linux distributions and in OpenSSH server process.
Ngl kaspersky is the close to the last group I care to hear from about security
Right. After posting this I saw the blog post by jfrog, which seems to do a very good job : https://jfrog.com/blog/xz-backdoor-attack-cve-2024-3094-all-you-need-to-know/
Well, it doesn't invalidate the analysis.
This was a sophisticated attack happening over 2 years, from knowing the current maintainer was emotionally vulnerable to the structure of using the build system to introduce the patched code to Linux distro repos.
I'm guessing Kaspersky will come to the same conclusions many others have; that this was a state actor or similiarly well heeled group.
Kaspersky is more trustworthy than CIA and Washington propaganda machinery on security matters.
Maybe Kaspersky is Russia backed and is filled with backdoors. Idk, and I don't care because I don't use their products. But I do know they have great security experts and when they publish analysis like thesez they are generally very complete and informative, like when they discovered the remote hack on iPhones thing: https://securelist.com/operation-triangulation-catching-wild-triangle/110916/
Indeed. Their knowledge and detailed articles are pure gold!
@independantiste @lemmyreader If Kaspersky is bad because they are Russia backed what should we think of companies that lick AmeriKKKa's ass? After all, the US is the biggest terrorist organization and an all out scourge on humanity.
Kaspersky is probably the best company to hear from regarding such high profile compromises. Their discovery and breakdown of the recent Apple chip backdoor revealed how the American spy machine infiltrated Apple.
Straight from the horse's mouth!
Kaspersky has a backdoor of their own in their software with full access given to Russian gov.
Edit: LOL Down votes by all the Kaspersky users or Russian bots? Trust me this won’t fix your backdoor problem.
Source?
US government. Let him tell you that.
*their (x2)