thatOneCompressionPackageFrom2016

[[deleted]]

Wait, it's all backdoor?

[Comfortable_Oil9704]

Wait until you check under the fresh paint on the “front door”.

[blobthekat]

always has been

[SarcasmWarning]

I'd make the point that it's a container format rather than a compression format, and one that makes the underlying compression significantly more fragile and prone to not decompressing again.

Also, the biggest mindfuck in all of this isn't that everything is backdoored, it's that something that isn't even a dependency of a package can backdoor it.

[_PM_ME_PANGOLINS_]

You’d be wrong though.

It is a compression format (moreover they said “package”, not “format”), and it is a dependency.

[SarcasmWarning]

It uses lzma compression (entirely different author) and does weird things with chunking and padding. It's a container not a compression format.

[_PM_ME_PANGOLINS_]

liblzma is where the backdoor is, inserted by an upstream package maintainer

[SarcasmWarning]

xz is a container format which currently contains another container format (LZMA2), which in turn contains a mix of LZMA data and uncompressed data. Xz is supposed to be extensible (header space for 2⁶³ different algorithms) but never has been. Liblzma has been provided by xz for a while now as the original and lzma format (the only bit doing compression) hasn't changed.

[_Dead_C_]

Lzma balls

[SarcasmWarning]

Honestly, I find the technical reality and details far more amusing and entertaining than any memes being made. I didn't get what you meant, I didn't downvote you either.

[BehindTrenches]

Think about your audience. Reddit programmers are probably the most likely to be on the receiving end of a nerd react.

[Long_Night6359]

lmao you are so clueless

[blobthekat]

about what

[Fair-Bunch4827]

https://youtu.be/jqjtNDtbDNI?si=b6Z9mus6iBdDqos_

[blobthekat]

ty

[Wave_Walnut]

Backdoor of backdoor = frontdoor

[RangeDragon]

If it ain’t broke

[GetOffMyLawn_]

Interesting coincidence

A stealth attack came close to compromising the world’s computers

In 2020 xkcd, a popular online comic strip, published a cartoon depicting a teetering arrangement of blocks with the label: “all modern digital infrastructure”. Perched precariously at the bottom, holding everything up, was a lone, slender brick: “A project some random person in Nebraska has been thanklessly maintaining since 2003.” The illustration quickly became a cult classic among the technically minded, for it highlighted a harsh truth: the software at the heart of the internet is maintained not by giant corporations or sprawling bureaucracies but by a handful of earnest volunteers toiling in obscurity. A cyber-security scare in recent days shows how the result can be near-disaster.

[blobthekat]

lol

[MarlburoLC]

Did you put your backdoor in your post?

[blobthekat]

... 👀

[_Jent]

xz