Recent searches
Search options
Administered by:
GitHub Disables The XZ Repository Following Today's Malicious Disclosure
Today's disclosure of XZ upstream release packages containing malicious code to compromise remote SSH access has certainly been an Easter weekend surprise... The situation only looks more bleak over time with how the upstream project was compromised while now the latest twist is GitHub disabling the XZ repository in its entirety...
https://www.phoronix.com/news/GitHub-Disables-XZ-Repo
@phoronix wouldn't be surprised if github goes tango down just due to non-nefarious traffic inquiring about the xz hack.
@phoronix This was a very well planned but deliberately malicious act that got caught almost by accident (long login times piqued the interest of an alert admin). Hiding in plain sight in open-source software. Very interesting stuff.