It looks like the person who added the backdoor is in fact the current co-mainta... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		Tenobrus on March 29, 2024 \| parent \| context \| favorite \| on: Backdoor in upstream xz/liblzma leading to SSH ser... It looks like the person who added the backdoor is in fact the current co-maintainer of the project (and the more active of the two): https://tukaani.org/about.html

kzrdude on March 30, 2024 | [–]

In various places they say Lasse Collin is not online right now, but he did make commits a week ago https://git.tukaani.org/?p=xz.git;a=summary

kzrdude on March 29, 2024 | [–]

Makes me wonder if he's an owner of the github organization, and what happens with it now?

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact