undefined | Better HN

0 pointsFireBeyond2y ago0 comments

> The only major one hit by this was homebrew, but they have never understood security anyway.

MacOS doesn't ship with sshd running out of the box, and vanishingly few people ever enable it.

0 comments

1 comments · 1 top-level

That's not the issue here. The xz backdoor author could have used the same technique to hijack any application that linked to xz, not just sshd.

j / k navigate · click thread line to collapse