Please open Telegram to view this post
VIEW IN TELEGRAM
Please open Telegram to view this post
VIEW IN TELEGRAM
🤪23😁8🤮5❤1👍1
&'a ::rynco::UntitledChannel
TLDR: 刚读完了这两篇关于 xz-utils 包的供应链攻击说明，攻击者潜伏了三年，很精彩，只差一点点就可以往众多 Linux 发行版的 sshd 注入后门，可用于绕过密钥验证，后果不堪设想。 概括： 1. 攻击者 JiaT75 (Jia Tan) 于 2021 年注册了 GitHub 账号，之后积极参与 xz 项目的维护，并逐渐获取信任，获得了直接 commit 代码的权利。 2. JiaT75 在最近几个月的一次 commit 中，悄悄加入了 bad-3-corrupt_lzma2.xz 和 good…
XZ细节（有我就更下去）
https://boehs.org/node/everything-i-know-about-the-xz-backdoor
https://bsky.app/profile/filippo.abyssdomain.expert/post/3kowjkx2njy2b
https://gynvael.coldwind.pl/?lang=en&id=782
https://doublepulsar.com/inside-the-failed-attempt-to-backdoor-ssh-globally-that-got-caught-by-chance-bbfe628fafdd
https://rigor-mortis.nmrc.org/@simplenomad/112184869681420177
https://research.swtch.com/xz-timeline
https://research.swtch.com/xz-script
https://twitter.com/bl4sty/status/1776691497506623562
https://securelist.com/xz-backdoor-story-part-1/112354/
https://www.ithome.com.tw/news/162292
https://youtu.be/Q6ovtLdSbEA
https://boehs.org/node/everything-i-know-about-the-xz-backdoor
https://bsky.app/profile/filippo.abyssdomain.expert/post/3kowjkx2njy2b
https://gynvael.coldwind.pl/?lang=en&id=782
https://doublepulsar.com/inside-the-failed-attempt-to-backdoor-ssh-globally-that-got-caught-by-chance-bbfe628fafdd
https://rigor-mortis.nmrc.org/@simplenomad/112184869681420177
https://research.swtch.com/xz-timeline
https://research.swtch.com/xz-script
https://twitter.com/bl4sty/status/1776691497506623562
https://securelist.com/xz-backdoor-story-part-1/112354/
https://www.ithome.com.tw/news/162292
https://youtu.be/Q6ovtLdSbEA
boehs.org
Everything I Know About the XZ Backdoor
Please note: This is being updated in real-time. The intent is to make sense of lots of simultaneous discoveries
❤4
This media is not supported in your browser
VIEW IN TELEGRAM
开车的这TM绝对是来捣乱的🤡
Please open Telegram to view this post
VIEW IN TELEGRAM
🐳10🌭3🗿1
Please open Telegram to view this post
VIEW IN TELEGRAM
😁10💅3❤2👍1🤡1
Forwarded from MJJ出征
搬瓦工46刀补货啦~
Basic VPS - Self-managed - SPECIAL 10G KVM PROMO V5 - LOS ANGELES - CN2 GIA LIMITED EDITION
SSD: 10 GB RAID-10
RAM: 512 MB
CPU: 1x Intel Xeon
Transfer: 500 GB/mo
Link speed: 1 Gigabit
Location: Los Angeles, China Telecom IDC
China Telecom CN2 GIA
Enterprise grade transport for China Unicom provided by China Telecom
Direct peering with Google
年付$46.6美金(折扣码下)
优惠码：
https://bandwagonhost.com/aff.php?aff=60379&pid=94
瓦工防墙镜像站：
温馨提示：使用网页自动保存密码的只对应域名，所以必须牢记小号账号密码，当然也可以作为验证是否为瓦工镜像网站（肯定没问题的）
https://bwh1.net/aff.php?aff=60379&pid=94
https://bwh8.net/aff.php?aff=60379&pid=94
https://bwh88.net/aff.php?aff=60379&pid=94
https://bwh89.net/aff.php?aff=60379&pid=94
https://bwh81.net/aff.php?aff=60379&pid=94
选购指南：不管你是新老用户，请使用全新邮箱登录注册搬瓦工（后期不要或者出掉会很便利）常见邮箱申请有微软outlook Gmail icloud申请
循环折扣码（优惠码）:
BWHNCXNVXV（6.81%）
有何区别：92刀（2023款92.5刀相比24款92.3刀 24款便宜0.2刀精准刀法😅）是46刀和89刀等流量配置都有翻倍，也有不知名75刀。后期不够用可以升级到The Plan v2 也就是110刀。
此款46刀是瓦工里CN2GIA在售最低端性价比档次。但流量比较小适合个人食用。没DMIT36刀可考虑此
Basic VPS - Self-managed - SPECIAL 10G KVM PROMO V5 - LOS ANGELES - CN2 GIA LIMITED EDITION
SSD: 10 GB RAID-10
RAM: 512 MB
CPU: 1x Intel Xeon
Transfer: 500 GB/mo
Link speed: 1 Gigabit
Location: Los Angeles, China Telecom IDC
China Telecom CN2 GIA
Enterprise grade transport for China Unicom provided by China Telecom
Direct peering with Google
年付$46.6美金(折扣码下)
优惠码：
BWHNCXNVXV
选购链接：（主站）https://bandwagonhost.com/aff.php?aff=60379&pid=94
瓦工防墙镜像站：
温馨提示：使用网页自动保存密码的只对应域名，所以必须牢记小号账号密码，当然也可以作为验证是否为瓦工镜像网站（肯定没问题的）
https://bwh1.net/aff.php?aff=60379&pid=94
https://bwh8.net/aff.php?aff=60379&pid=94
https://bwh88.net/aff.php?aff=60379&pid=94
https://bwh89.net/aff.php?aff=60379&pid=94
https://bwh81.net/aff.php?aff=60379&pid=94
选购指南：不管你是新老用户，请使用全新邮箱登录注册搬瓦工（后期不要或者出掉会很便利）常见邮箱申请有微软outlook Gmail icloud申请
循环折扣码（优惠码）:
BWHCCNCXVV (6.78%)有何区别：92刀（2023款92.5刀相比24款92.3刀 24款便宜0.2刀精准刀法😅）是46刀和89刀等流量配置都有翻倍，也有不知名75刀。后期不够用可以升级到The Plan v2 也就是110刀。
此款46刀是瓦工里CN2GIA在售最低端性价比档次。但流量比较小适合个人食用。没DMIT36刀可考虑此
🤡18⚡13😁9🔥6❤3