cross-posted from: https://lemmy.ml/post/14334283
transcript
Screenshot of github showing part of the commit message of this commit with this text:
Remove the backdoor found in 5.6.0 and 5.6.1 (CVE-2024-3094). While the backdoor was inactive (and thus harmless) without inserting a small trigger code into the build system when the source package was created, it's good to remove this anyway: - The executable payloads were embedded as binary blobs in the test files. This was a blatant violation of the Debian Free Software Guidelines. - On machines that see lots bots poking at the SSH port, the backdoor noticeably increased CPU load, resulting in degraded user experience and thus overwhelmingly negative user feedback. - The maintainer who added the backdoor has disappeared. - Backdoors are bad for security. This reverts the following without making any other changes:The sentence “This was a blatant violation of the Debian Free Software Guidelines” is highlighted.
Below the github screenshot is a frame of the 1998 film The Big Lebowski with the meme caption “What, are you a fucking park ranger now?” from the scene where that line was spoken.
You must log in or register to comment.
Backdoors are bad for security
They’re great for avoiding jealous husbands who come home early unexpectedly though
NSFW
I was with my mistress one day when she heard her husband walking up the drive. She said, “quick, use the back door!”. I wasn’t sure we had time, but it’s not every day you’re offered anal
Dude I worked for in 2008 (small IT support company) insisted we store all the domain logins and passwords for all our customer’s networks on our internal Sharepoint system and forward a port to RDP on all their domain controllers. It was a fucked up place to work with every procedure pulled out of someone’s ass on the spot.
/randomrelatedstory
makes malware
Debian-THATS NOT FOSS IN ARE CODE, o yeah its also malware
To be fair proprietary software really shouldn’t be trusted
“Backdoors are bad for security”
Lady, I got buddies who died face-down in the muck so that you and I could enjoy this FOSS library!
Why does everything have to do with 'Nam?
