Note that none of these steps require the attacker to have any code in the kerne... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		Denvercoder9 on April 2, 2024 \| parent \| context \| favorite \| on: Timeline of the xz open source attack Note that none of these steps require the attacker to have any code in the kernel. The kernel patchset is completely orthogonal to the possibility of this attack, and seems to be benign.

sandstrom on April 2, 2024 [–]

Yeah, but gaining trust with benign patchset would be the first step.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact