Saw some twitter posts about it and seems like an interesting story, but all the discussion I’ve seen assumes some base technical understanding. I’m unfamiliar with Linux and even concepts like what a backdoor is I can at best guess a surface level meaning.
In: Technology
There is a popular ziping library for Linux called XZ.
Someone (probably the maintainer) managed to embed a malware in the latest version of it that goes to SSH (Remote desktop for terminals) and disables certain security features letting someone who knows they have been disabled remote in to a server with an open SSH port.
Once in, they can do whatever they want
Latest Answers