So, kids, what's the moral of the XZ story?
If you're going to backdoor something, make sure that your changes don't impact its performance. Nobody cares about security - but if your backdoor makes the thing half a second slower, some nerd is going to dig it up.
VessOnSecurity /
npub1jw…2d3q7
2024-03-30 15:13:09
Author Public Key
npub1jw3gppe8mxtdd5szxpvakxg9s00kdxqmdmp7x5v84w0urnyw3y5qn2d3q7Published at
2024-03-30 15:13:09Event JSON
{
"id": "26fa413bebeaea7890964911961df1ea7d5f3b07fd28eadcb2894b13676185ba",
"pubkey": "93a2808727d996d6d2023059db190583df66981b6ec3e35187ab9fc1cc8e8928",
"created_at": 1711811589,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/users/bontchev/statuses/112185284355594201",
"activitypub"
]
],
"content": "So, kids, what's the moral of the XZ story?\n\nIf you're going to backdoor something, make sure that your changes don't impact its performance. Nobody cares about security - but if your backdoor makes the thing half a second slower, some nerd is going to dig it up.",
"sig": "961697d7270435d6177f65ba361c49004c76633fcb2b38cfcc81030d9eb5437c6325f1fb92aaef2df45c13f9e71da3af9f5b68a9280192b7d79efab00fdcbda6"
}