overview for Hubi

“Given the activity over several weeks, the committer is either directly involved or there was some quite severe compromise of their system,” an official with distributor OpenWall wrote in an advisory. “Unfortunately the latter looks like the less likely explanation, given they communicated on various lists about the ‘fixes’” provided in recent updates. Those updates and fixes can be found here, here, here, and here.

On Thursday, someone using the developer's name took to a developer site for Ubuntu to ask that the backdoored version 5.6.1 be incorporated into production versions because it fixed bugs that caused a tool known as Valgrind to malfunction.

“This could break build scripts and test pipelines that expect specific output from Valgrind in order to pass,” the person warned, from an account that was created the same day.

One of maintainers for Fedora said Friday that the same developer approached them in recent weeks to ask that Fedora 40, a beta release, incorporate one of the backdoored utility versions.

“We even worked with him to fix the valgrind issue (which it turns out now was caused by the backdoor he had added),” the Ubuntu maintainer said.

He has been part of the xz project for two years, adding all sorts of binary test files, and with this level of sophistication, we would be suspicious of even older versions of xz until proven otherwise.

843

Reddit shares plunge almost 25% in two days, finish the week below first day close (www.cnbc.com)

submitted 6 months ago by Hubi@feddit.de to c/reddit@lemmy.world

169 comments fedilink

353

Russian TV airs fake video alleging Ukrainian involvement in terrorist attack, featuring Ukrainian official (www.pravda.com.ua)

submitted 6 months ago by Hubi@feddit.de to c/world@lemmy.world

49 comments fedilink

83

Russian TV airs fake video alleging Ukrainian involvement in terrorist attack, featuring Ukrainian official (www.pravda.com.ua)

submitted 6 months ago by Hubi@feddit.de to c/ukraine@sopuli.xyz

2 comments fedilink

How was fugitive Kaitlin Armstrong caught? She answered U.S. Marshals' ad for a yoga instructor in c/news@lemmy.world

[-] Hubi@feddit.de 167 points 8 months ago

Det. Jonathan Riley: … on the night of the murder, Kaitlin Armstrong's phone was not connected to a cell network.

Jonathan Vigliotti: Not connected?

Det. Jonathan Riley: Correct. So, whether she powered it off, whether she put in an airplane mode, uh, there's some something happened that her phone was not communicating with any cellphone towers.

Jonathan Vigliotti: Do you think this was on purpose?

Det. Jonathan Riley: Absolutely … in this day and age, if your phone is off and not connected to a network, you're either the victim of a crime or you're probably committing one.

That's kind of ...disturbing?

Reddit API blew up and now I run Linux? in c/linux@lemmy.ml

[-] Hubi@feddit.de 276 points 8 months ago

I'm afraid it's terminal.

Market shar(ul)e in c/196@lemmy.blahaj.zone

[-] Hubi@feddit.de 117 points 10 months ago

Nah, the real reason is that Linux doesn't come pre-installed on new devices. The average user doesn't even know that you can install a different operating system. This is a much larger hurdle than the gaming experience.

Gabe Newell on why game delays are okay: 'Late is just for a little while. Suck is forever.' in c/games@sh.itjust.works

[-] Hubi@feddit.de 147 points 10 months ago

Interesting spin on the "A delayed game is eventually good, but a rushed game is forever bad"-quote.

The race for "Worst Dumpster Fire" is heating up. Everyone place your bets! in c/memes@lemmy.ml

[-] Hubi@feddit.de 137 points 1 year ago

I feel like it's unfair to include TikTok as it had a clear headstart by being a dumpster fire since the very start.

Official Statement from Lemmy.world admin about community removal in c/piracy@lemmy.dbzer0.com

[-] Hubi@feddit.de 109 points 1 year ago* (last edited 1 year ago)

Honestly, I don't blame them one bit. People need to keep in mind that these instances and sites are provided for free by private individuals and not large companies with armies of lawyers. I wouldn't want to fight a potential lawsuit for "enabling piracy", no matter how much bullshit it is. If the admins of dbzer0 have taken the necessary precautions, great! Just join their instance if that's what you're looking for.

Reddit beats film industry, won’t have to identify users who admitted torrenting in c/technology@lemmy.world

[-] Hubi@feddit.de 217 points 1 year ago

I don't get the hate. I enjoy shitting on reddit as much as the next guy, but defending their user's right to remain anonymous in court has been one thing they've got a pretty solid record on.

When Lemmy.world and Lemmy.ml go down in c/lemmyshitpost@lemmy.world

[-] Hubi@feddit.de 118 points 1 year ago

Diese Kommentarsektion ist nun Eigentum der Bundesrepublik Deutschland

Those of you who shower barehanded: Do you lather and then use your hand, or just shove the soap wherever it needs to go? in c/asklemmy@lemmy.ml

[-] Hubi@feddit.de 310 points 1 year ago

who shower barehanded

There is another way...?

Deutsche Regierung umgeht Twitter-Beschränkungen in c/dach@feddit.de

[-] Hubi@feddit.de 139 points 1 year ago

Ich verstehe nicht warum alle so zwanghaft bei einer ihren Nutzern gegenüber derart feindlich eingestellten Plattform wie Twitter bleiben wollen. Gerade bei der Bundesregierung überrascht es mich irgendwo, dass die eigene Präsenz auf einer Seite, die aktiv Nazis, russische Propaganda und Verschwörungstheorien bewirbt, nicht komplett abgeschaltet wird.

Die EU hat doch ihre eigenen Instanzen im Fediverse, warum wird nicht nach da gewechselt?