emirkmo/xz-backdoor-github
View on GitHub ↗ ★ 11 Python
History of commits related to the xz backdoor Discovered On March 29, 2024: CVE-2024-3094.
3 mentions on Hacker News by 1 person: 0 stories, 3 comments · first 2024-03-30 · latest 2024-03-31
20082026
-
You can find the GitHub events here, I compiled them into CSVs. https://github.com/emirkmo/xz-backdoor-github I literally run a git hook that fixes my commit times so I don’t look like a freak to my coworkers making commits at 3am, I think…
comment by Randalthorro · 2024-03-31 · in XZ backdoor: "It's RCE, not auth bypass, and gated/unreplayable." -
You can find GitHub events from the repo as a csv here https://github.com/emirkmo/xz-backdoor-github If you are interested in the source code that is easy to find. This code and git repo are linked all over the world, in many git repos,…
comment by Randalthorro · 2024-03-31 · in XZ backdoor: "It's RCE, not auth bypass, and gated/unreplayable." -
…from the two suspected users and from their shared project repo as easy to consume CSV files: https://github.com/emirkmo/xz-backdoor-github For those who want to see the GitHub events (commits, comments, pull_requets, diffs, etc.)
comment by Randalthorro · 2024-03-30 · in Backdoor in upstream xz/liblzma leading to SSH server compromise