At a certain level I am amused that probably millions of dollars of careful espionage work has been pissed away by a fraction of a second delay in an exploit.
Far more of a problem though are systems that dynamically assemble stuff from latest versions of things. We can be sure that some maintainers of those thousands of tiny pieces are careful, reliable maintainers funded by various governments who if the call comes will use that trust to flip them for bad causes.
#xz #infosec
The Penguin of Evil /
npub145…n6ugl
2024-03-30 10:09:47
Author Public Key
npub145t9a2fd7vh4k02ywsmshty68ws5jsc2jkewf3ew8a2vreatzajsrn6uglPublished at
2024-03-30 10:09:47Event JSON
{
"id": "adf735ad23b48feabc6e616511000984d952dd4ac8145645e9ac15b65efe4d56",
"pubkey": "ad165ea92df32f5b3d4474370bac9a3ba149430a95b2e4c72e3f54c1e7ab1765",
"created_at": 1711793387,
"kind": 1,
"tags": [
[
"t",
"xz"
],
[
"t",
"infosec"
],
[
"proxy",
"https://mastodon.social/users/etchedpixels/statuses/112184091450135155",
"activitypub"
]
],
"content": "At a certain level I am amused that probably millions of dollars of careful espionage work has been pissed away by a fraction of a second delay in an exploit.\n\nFar more of a problem though are systems that dynamically assemble stuff from latest versions of things. We can be sure that some maintainers of those thousands of tiny pieces are careful, reliable maintainers funded by various governments who if the call comes will use that trust to flip them for bad causes.\n\n#xz #infosec",
"sig": "31c7687d3e7f240c7c5ee70354ed41451bf31078b844f6608db4608d79464750c0042a78e4248c812386d135e3962d921701888aacaa3e80229b94048d60b1ff"
}