Re: follow-up on backdoor CPU usage (was: libsystemd dependencies)

2024-04-26 Thread Jacob Bachmeyer
Jacob Bachmeyer wrote: [...] The preliminary reports that it was an RCE backdoor that would pass commands smuggled in public key material in SSH certificates to system(3) (as root of course, since that is sshd's context at that stage) are inconsistent with the slowdown that caused the

Re: libsystemd dependencies

2024-04-03 Thread Richard Stallman
[[[ To any NSA and FBI agents reading my email: please consider]]] [[[ whether defending the US Constitution against all enemies, ]]] [[[ foreign or domestic, requires you to follow Snowden's example. ]]] > However, the question remains unanswered why it needs 3 different >

Re: libsystemd dependencies

2024-04-01 Thread Jacob Bachmeyer
es exactly that, and ended up getting xz-utils targeted as a means of getting to sshd without the OpenSSH maintainers noticing. The systemd people are working on reducing the libsystemd dependencies: https://github.com/systemd/systemd/issues/32028 However, the question remains unanswered why it needs 3

Re: libsystemd dependencies

2024-04-01 Thread Bruno Haible
, and ended up getting > xz-utils targeted as a means of getting to sshd without the OpenSSH > maintainers noticing. The systemd people are working on reducing the libsystemd dependencies: https://github.com/systemd/systemd/issues/32028 However, the question remains unanswered why it n