The XZ Backdoor - report from our side, retrospection and looking forward (osc24)

Chaos Computer Club - recent audio-only feed

Inhalt bereitgestellt von CCC media team. Alle Podcast-Inhalte, einschließlich Episoden, Grafiken und Podcast-Beschreibungen, werden direkt von CCC media team oder seinem Podcast-Plattformpartner hochgeladen und bereitgestellt. Wenn Sie glauben, dass jemand Ihr urheberrechtlich geschütztes Werk ohne Ihre Erlaubnis nutzt, können Sie dem hier beschriebenen Verfahren folgen https://de.player.fm/legal.

3M ago 26:11

MP3•Episode-Home

End of March 2024 we faced the biggest supply chain attack we seen so far in the Open Source Ecosystem. A dedicated attacker had launched a multi year effort to backdoor the xz compression library. openSUSE Tumbleweed contained the backdoor for 3 whole weeks before an outside researcher found it. We will give a report on this attack, our reaction on it and also go into some future considerations to detect or avoid these kind of sophisticated attacks. End of March 2024 we faced the biggest supply chain attack we seen so far in the Open Source Ecosystem. A dedicated attacker had launched a multi year effort to backdoor the xz compression library. openSUSE Tumbleweed contained the backdoor for 3 whole weeks before an outside researcher found it. We will give a report on this attack, our reaction on it and also go into some future considerations to detect or avoid these kind of sophisticated attacks. about this event: https://c3voc.de

2086 Episoden

#CCC media team #Ccc Congress Hacking Security Netzpolitik #Sicherheit #Technologie #Software-Entwicklung