lemmyreader@lemmy.ml to Open Source@lemmy.mlEnglish · 6 months agoInside the failed attempt to backdoor SSH globally - that got caught by chance - Kevin Beaumontdoublepulsar.comexternal-linkmessage-square23fedilinkarrow-up1229
arrow-up1224external-linkInside the failed attempt to backdoor SSH globally - that got caught by chance - Kevin Beaumontdoublepulsar.comlemmyreader@lemmy.ml to Open Source@lemmy.mlEnglish · 6 months agomessage-square23fedilink
minus-squareChannelSix@aussie.zonelinkfedilinkarrow-up21·6 months agoDude, the issue was found purely by coincidence, it very nearly made it through
minus-squarehitmyspot@aussie.zonelinkfedilinkarrow-up27arrow-down1·6 months agoYes, but it didn’t. Has it made it through on closed software? Who knows?
minus-squareErilElidor@feddit.delinkfedilinkarrow-up18·6 months agoMy takeaway is more like: This one almost made it through and was caught by accident. How much more backdoors actually were not caught and made it through? I would bet some money on it being more than 0 :(
minus-squaretrolololol@lemmy.worldlinkfedilinkarrow-up2·6 months agoYep for sure. But open source at least let’s you examine every part of the ecosystem. No software is perfect even if all contributors have good intentions and do all due diligence. Throw some malice and there is a chance something will get through.
minus-squarehitmyspot@aussie.zonelinkfedilinkarrow-up1·6 months agoYes, probabky, but also might be possible to now find.
minus-squaretrolololol@lemmy.worldlinkfedilinkarrow-up8·6 months agoAlso this was a multi year effort that employed very complex knowledge. And still didn’t get thru. If it’s multi year and very complex it’s telling that this is what it takes. The bar is very high.
Dude, the issue was found purely by coincidence, it very nearly made it through
Yes, but it didn’t. Has it made it through on closed software? Who knows?
My takeaway is more like: This one almost made it through and was caught by accident. How much more backdoors actually were not caught and made it through? I would bet some money on it being more than 0 :(
Yep for sure. But open source at least let’s you examine every part of the ecosystem.
No software is perfect even if all contributors have good intentions and do all due diligence.
Throw some malice and there is a chance something will get through.
Yes, probabky, but also might be possible to now find.
Also this was a multi year effort that employed very complex knowledge. And still didn’t get thru.
If it’s multi year and very complex it’s telling that this is what it takes. The bar is very high.