Re: Malware find in the news: xz related.

On 31.03.2024 um 14:40 Uhr Grant Taylor wrote:

On 31.03.2024 um 19:15 Uhr Lew Pitcher wrote:

Still, if I had one of the suspicious xz/liblzma packages
installed, I'd not hesitate to "nuke it from orbit" and replace it
with a known-good version. 

 
I'm not a fan of nuke it from orbit as a knee jerk reaction that some
people have.

I can understand that, but this is the only really secure variant.
Everything else has the probability that someone may broke in and
information got leaked.

On 3/31/24 14:27, Marco Moock wrote:

The big trouble with that: You need to think that your entire
system is compromised, including the files you had there, passwords
you typed, private keys used. 

 
There are two primary forms of compromise here; disclosure and
alteration.  The first is somewhat difficult to prove didn't happen

Although, it is a serious threat because it somebody recorded passwords
you typed or got secret keys, all of those machines can be compromised
now.

The second one can be quite easy to do with good backup systems.

Although, it can't help against disclosure and that means passwords and
keys MAY be known to others now.


--
kind regards
Marco

Send spam to 1711888844muell@cartoonies.org