@GossiTheDog That's interesting. So basically removed...

All posts Kevin's posts Post Back to profile

@GossiTheDog That's interesting. So basically removed all of the requests for specific information, and left reporting as: "send us an email or something"?

Like 29 March at 21:31 | Wall-to-wall | Open on infosec.exchange

3 comments

Kevin Beaumont

@jbaggs yeah. So they changed one to “If you discover a security vulnerability in this project please report it privately. Do not disclose it as a public issue.” as an example. Looks like a long game attack.

29 March at 21:34 | Open on cyberplace.social

jbaggs

@GossiTheDog I had just looked at the one on xz. That's definitely worse.

29 March at 21:36 | Open on infosec.exchange

fuomag9

@GossiTheDog @jbaggs bugs.launchpad.net/ubuntu/+source/xz-utils/+bug/2059417 this is also interesting, they signed up yesterday on ubuntu

29 March at 22:49 | Open on lime.fuo.fi

Go Up