Kaspersky analysis of the backdoor in XZ
(web.archive.org)
from lemmyreader@lemmy.ml to linux@lemmy.ml on 14 Apr 2024 11:57
https://lemmy.ml/post/14444858
from lemmyreader@lemmy.ml to linux@lemmy.ml on 14 Apr 2024 11:57
https://lemmy.ml/post/14444858
threaded - newest
Ngl kaspersky is the close to the last group I care to hear from about security
techopedia.com/…/kasperskys-us-ban-a-long-history…
Right. After posting this I saw the blog post by jfrog, which seems to do a very good job : jfrog.com/…/xz-backdoor-attack-cve-2024-3094-all-…
Kaspersky is more trustworthy than CIA and Washington propaganda machinery on security matters.
Well, it doesn’t invalidate the analysis.
This was a sophisticated attack happening over 2 years, from knowing the current maintainer was emotionally vulnerable to the structure of using the build system to introduce the patched code to Linux distro repos.
I’m guessing Kaspersky will come to the same conclusions many others have; that this was a state actor or similiarly well heeled group.
First time I’ve seen somebody acknowledge that it’s not just nation states with such capabilities. There are some huge organized crime syndicates.
But from what I’ve seen cybersec is mostly about blaming Russia/China/DPRK
.
Source?
They are based in Russia
I was curious whether some scandal about data being sent to russian govt had emerged after the war, but apparently things are as they used to be.
Mind you, AVs have a scary control over your system, and I totally respect not wanting to use one headquartered in Russia (and since the government security agencies have ties within those companies even in the “free world” (lmao) it’s safe to assume Russian govt has them inside Kaspersky too).
With that being said, kaspersky is actually a multinational corporation present in many areas of the world, I wonder how much influence Moscow actuallt has over them.
Honestly AVs are kind of snake oil. I wouldn’t use any of them.
I agree and I also support the “common sense is the best av” argument, but for less tech savy people and workplaces I do think it’s necessary to have a last hope safety net against malware
That’s not a source. By that metric every American AV has an NSA backdoor. And, ok, both of these are probably true tbh. But Kaspersky publishes extremely good security research and analysis which is just technical and totally possible to verify independently, so there’s no reason to avoid those, even if you don’t want to use their software.
I don’t use any of that software because it is a proprietary black box
That’s a different topic, you’re moving the goalposts :P
US government. Let him tell you that.
.
*their (x2)
.
Maybe Kaspersky is Russia backed and is filled with backdoors. Idk, and I don’t care because I don’t use their products. But I do know they have great security experts and when they publish analysis like thesez they are generally very complete and informative, like when they discovered the remote hack on iPhones thing: securelist.com/…/110916/
Indeed. Their knowledge and detailed articles are pure gold!
Straight from the horse’s mouth!