The thwarted XZ Utils supply chain attack was years in the making. Now, clues suggest nation-state hackers were behind the persona that inserted the malicious code.
  • Sims@lemmy.ml
    624·
    9 months ago

    OC it was the US. It’s what they have done forever. It’s embarrassing to hear them try to incriminate the enemies of the US capitalist elites. Too much propaganda garbage in this one…

      • onlinepersona@programming.devEnglish
        73·
        9 months ago

        After Snowden, we can’t pretend the USA isn’t one of the biggest source of security intrusions. They literally rerouted hardware and software packets to mess with them before they reached their destination. They influenced the basis of crypo by influencing the decision to introduce an encryption scheme (elliptic curve cryptography). Does anybody believe pressuring a lone developer is beyond them?

        Yes, it could also be China, Russia or any other state, but given how prolific the USA has been, they are rightfully the first suspect.

        Anti Commercial AI thingy

        CC BY-NC-SA 4.0

        • resetbypeer@lemmy.world
          41·
          9 months ago

          It’s clear this is a long in advanced supply chain attack. So this is for sure not a lone wolf thing. Parts of it were very thought through but just came comically to light.

          Yes history shown the US has been doing naughty things revealed by Snowden but we can’t come to conclusions yet, since nothing is yet been proven (if it ever will be). Long story short blaming somebody (regardless who) makes no sense at this moment.