Why so much attention on the fixxed issue.

submitted by Req from (self.Linux)

quote from the article: https://arstechnica.com/security/2024/03/backdoor-found-in-widely-used-linux-utility-breaks-encrypted-ssh-connections/

"Because the backdoor was discovered before the malicious versions of xz Utils were added to production versions of Linux, “it's not really affecting anyone in the real world,” Will Dormann, a senior vulnerability analyst at security firm Analygence, said in an online interview. “BUT that's only because it was discovered early due to bad actor sloppiness."

If thats the case, why is this news everywhere. Dont get me wrong. Im happy that even more people are back on their toes but this didnt seem to hurt alot of people/organizations. why is this getting spotlight while it has been fixed already whilist there are still plenty of open issues and plenty more active vulnerabilities still around?

https://stack.watch/product/linux/

I get that we dodged a bullet but i think the news articles should focus more on the still active issues. Am i wrong?

all 2 comments
sorted by:
top
newinsightfulfun

[–]chadwickofwv 2 insightful - 1 fun2 insightful - 0 fun3 insightful - 1 fun -  (1 child)

The Linux Foundation is essentially owned by Microsoft. Because of this they will do absolutely anything possible to make Linux look bad at every opportunity.

[–]Req[S] 1 insightful - 1 fun1 insightful - 0 fun2 insightful - 1 fun -  (0 children)

ya know that might be right. it never made sense since MS are supposed to be the "evil" of the software world. I was thinking them supporting was a publicity stunt to make people hate them less but it would also make sense that their increased involvement might allow them to have more influence over the direction of linux.

i guess i cant predict the motives of a multi-trillion dollar company :/

let me know if you have any other possible incentives towards anyone that would benifit from the hype of this article whilist disregarding the multiple in production issues that still exist. Its almost like they are trying o to draw a fine line by spotlighting this issue but neglecting the others? it just seems too specific and i dont like that i cant understand why...