101
Red Hat npm Packages Compromised to Spread a Credential-Stealing Worm (www.aikido.dev)
submitted 5 months ago by to c/linux@lemmy.ml
11 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 5 months ago (1 child)

Dare I ask, what ssh thing?

Side Note: It was already believed that SSH encryption was broken by state actors since the first NSA leaks. So, people should at least always use it over another encrypted channel anyway.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 5 months ago

    YES! This was a huge deal that what a lucky mishap rather than a sign of good security.

    https://en.wikipedia.org/wiki/XZ_Utils_backdoor

    Btw, Jia Tan is an awesome software dev that you should hire. /s

    We're all completely pwned. That's the only way to feel ok for me. My info has been compromised tons of times and no one notified me. I just accept it. I practice good security and I know that some of the companies on the other side don't. I can't change that.

    Have you accepted that you're gonna die? If yes, you should adopt this attitude. If not, I'm sorry that you're so afraid of the natural process. Try to be healthy. Try to be secure. Accept that you're gonna die or get pwned or both. It's a lot healthier mindset (IMO).

  • permalink
  • fedilink
  • source
  • parent