XZ Utils backdoor
tukaani.org

They haven’t particularly made a comment on the situation so much as acknowledged it’s happening. They seem to be going with the story that they had nothing to do with it and this is news to them. Hope to hear more from them soon so we can find out more about the situation, how and why this happened, etc.

(The sceptical tone isn’t because of disbelief of Collin, it’s because we don’t know enough about the situation to be able to say Collin is or isn’t telling the truth here.)

  • Alex@lemmy.ml
    1891·
    8 months ago

    Don’t be too hard on Collin. Looking back on the threads it’s fairly clear he’s been the victim of a social engineering attack on an overworked maintainer. People were pressuring him to hand over maintainership while expressing disappointment at the slow pace of development. The off-list contact by Jia must have seemed like a helpful enthusiastic solution to a burnt out developer.

    • 2xsaiko@discuss.tchncs.de
      109·
      8 months ago

      People were pressuring him to hand over maintainership while expressing disappointment at the slow pace of development.

      Very likely that was part of the attack as well.

        • eveninghere@beehaw.org
          22·
          8 months ago

          Sorry to hear your situation. I’ve heard a similar story from a friend, where cronies bully one “colleague” after another to push that poor person to the edge. These morons climb the company’s career ladder in that way, hacking the HR evaluation. It’s truly disgusting.

          • haui@lemmy.giftedmc.com
            91·
            8 months ago

            Thanks for understanding. I didnt imagine a nice comment like this. :)

            In fact it was my company and an employee who I trusted worked behind my back to take over. When that didnt work he took off with company assets.

            • eveninghere@beehaw.org
              3·
              8 months ago

              Indeed, ugh, can I go on because it’s too personal to me.

              My personal feeling is that the high-level management of such companies are indeed crony-ists. To this type of morons, companies are just assets that are to be cracked down and shared by their prestigious celebrity network or whatever.

              Well, this is a biased view, but I’m gonna soon find out how much this applies to my employer…

    • communism@lemmy.mlOP
      49·
      8 months ago

      I agree with that assessment, I’m not accusing Collin of anything. If it is what it seems to be then I feel very bad for him. Just being cautious with wording until things are more settled/until we know more is all.

      • UckyBon@lemmy.world
        34·
        8 months ago

        I just made a similar comment in another thread here:

        I read a lot about how we should double, triple check all the code. But what we shouldn’t forget is to check up on our people too.

    • Zoop@beehaw.org
      14·
      8 months ago

      Poor guy. My heart breaks for him. I hope people are understanding, compassionate, empathetic, and aren’t hateful and harrassing towards him about it, but, realistically… they likely will be hateful and harrass the poor dude, because some people are just sucky, entitled, and rude little jackasses (and I hate it so much and I don’t understand why people behave this way!) I hope he can find a way to handle it all okay. :(