Before everybody high fives each other, this is how the backdoor was found: somebody happened to look at why CPU usage had increased in sshd, and did all the research and notification work themselves. By this point the backdoor had been there for a month unnoticed.
I’ve made the joke before that if GCHQ aren’t introducing backdoors and vulns in open source that I want a tax refund. It wasn’t a joke. And it won’t be just be GCHQ.
https://mastodon.social/@AndresFreundTec/112180406142695845
Kevin Beaumont /
npub1lc…6lcye
2024-03-30 08:46:16
in reply to nevent1q…lcsj
Author Public Key
npub1lcc6wn885u6k395x5j5tmdm94r6dh9zajxm8gyk82pv2s2j3el7sc6lcyePublished at
2024-03-30 08:46:16Event JSON
{
"id": "1ca936111234be325fc1b1d0aac2cf6a8059b806070360fefdf245690fcd8632",
"pubkey": "fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd",
"created_at": 1711788376,
"kind": 1,
"tags": [
[
"p",
"8f89479b936fae1b6598e48076bc40d9f9c3af29e159a75895409fc29e742584"
],
[
"p",
"d33ea30716562b9255e89766f4d1cf37324284944679d57a3eed9775876dc606"
],
[
"e",
"ffbdfc5bbbc602122a60357cc7fa88ffb4d1ddb33537feca62201cff25d3c068",
"",
"reply"
],
[
"p",
"fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd"
],
[
"e",
"2b7f38a033350a466f6442c2eed68cf2163db772c13a4ad93ccc03647892897a",
"",
"root"
],
[
"p",
"51ae1009e4403d821fc1c12e14bf4b40de44c7dc6177898840ca1ef9f9ebc768"
],
[
"proxy",
"https://cyberplace.social/users/GossiTheDog/statuses/112183763037556785",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://cyberplace.social/users/GossiTheDog/statuses/112183763037556785",
"pink.momostr"
]
],
"content": "Before everybody high fives each other, this is how the backdoor was found: somebody happened to look at why CPU usage had increased in sshd, and did all the research and notification work themselves. By this point the backdoor had been there for a month unnoticed. \n\nI’ve made the joke before that if GCHQ aren’t introducing backdoors and vulns in open source that I want a tax refund. It wasn’t a joke. And it won’t be just be GCHQ.\n\nhttps://mastodon.social/@AndresFreundTec/112180406142695845",
"sig": "5c60b1181ae2a82ba24a2411f63e70b126a08f54ae7ac4ed83e1c8e1de40ece650eb850380bd7edd1df52a0c96ce71d863d2f368a56b24eedafaa51be0cbfade"
}