326
Lasse Collin, the other xz maintainer, has acknowledged the backdoor (tukaani.org)
submitted 2 years ago by to c/linux@lemmy.ml
53 comments fedilink hide all child comments
 

They haven't particularly made a comment on the situation so much as acknowledged it's happening. They seem to be going with the story that they had nothing to do with it and this is news to them. Hope to hear more from them soon so we can find out more about the situation, how and why this happened, etc.

(The sceptical tone isn't because of disbelief of Collin, it's because we don't know enough about the situation to be able to say Collin is or isn't telling the truth here.)

you are viewing a single comment's thread
view the rest of the comments
[–] 180 points 2 years ago (3 children)

Don't be too hard on Collin. Looking back on the threads it's fairly clear he's been the victim of a social engineering attack on an overworked maintainer. People were pressuring him to hand over maintainership while expressing disappointment at the slow pace of development. The off-list contact by Jia must have seemed like a helpful enthusiastic solution to a burnt out developer.

  • permalink
  • fedilink
  • source
  • hideshow 6 child comments
    •
  • [–] 103 points 2 years ago (1 child)

    People were pressuring him to hand over maintainership while expressing disappointment at the slow pace of development.

    Very likely that was part of the attack as well.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 44 points 2 years ago (1 child)

    Definitely sounds like it. This happened to me in a real company as well. It was butal.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 22 points 2 years ago (1 child)

    Sorry to hear your situation. I've heard a similar story from a friend, where cronies bully one "colleague" after another to push that poor person to the edge. These morons climb the company's career ladder in that way, hacking the HR evaluation. It's truly disgusting.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 8 points 2 years ago (1 child)

    Thanks for understanding. I didnt imagine a nice comment like this. :)

    In fact it was my company and an employee who I trusted worked behind my back to take over. When that didnt work he took off with company assets.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 3 points 2 years ago* (2 children)

    Indeed, ugh, can I go on because it's too personal to me.

    My personal feeling is that the high-level management of such companies are indeed crony-ists. To this type of morons, companies are just assets that are to be cracked down and shared by their prestigious celebrity network or whatever.

    Well, this is a biased view, but I'm gonna soon find out how much this applies to my employer...

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] [S] 47 points 2 years ago (1 child)

    I agree with that assessment, I'm not accusing Collin of anything. If it is what it seems to be then I feel very bad for him. Just being cautious with wording until things are more settled/until we know more is all.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 34 points 2 years ago

    I just made a similar comment in another thread here:

    I read a lot about how we should double, triple check all the code. But what we shouldn't forget is to check up on our people too.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 14 points 2 years ago

    Poor guy. My heart breaks for him. I hope people are understanding, compassionate, empathetic, and aren't hateful and harrassing towards him about it, but, realistically... they likely will be hateful and harrass the poor dude, because some people are just sucky, entitled, and rude little jackasses (and I hate it so much and I don't understand why people behave this way!) I hope he can find a way to handle it all okay. :(

  • permalink
  • fedilink
  • source
  • parent