this post was submitted on 04 Mar 2025
26 points (100.0% liked)

Programming

18506 readers
174 users here now

Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!

Cross posting is strongly encouraged in the instance. If you feel your post or another person's post makes sense in another community cross post into it.

Hope you enjoy the instance!

Rules

Rules

  • Follow the programming.dev instance rules
  • Keep content related to programming in some way
  • If you're posting long videos try to add in some form of tldr for those who don't want to watch videos

Wormhole

Follow the wormhole through a path of communities !webdev@programming.dev



founded 2 years ago
MODERATORS
 

I'm curious what kind of project you are working on? I'm working on a procedural terrain generation open world game! Now it's your turn to tell me!

you are viewing a single comment's thread
view the rest of the comments
[–] jia_tan@lemmy.blahaj.zone 4 points 12 hours ago (2 children)

Currently working on The Next Big Thing™️ in the Linux community.

Free tech tip: turn off auto updates on your servers so that you always run proven and stable software :3c

I have to appreciate linux and the people who actually make changes in open source code.

[–] fxomt@lemmy.dbzer0.com 2 points 11 hours ago* (last edited 11 hours ago) (2 children)

jia_tan

Oh god, round two already?

[–] TheCatGameCompany@programming.dev 2 points 11 hours ago (2 children)
[–] tal@lemmy.today 2 points 10 hours ago* (last edited 10 hours ago)

Jia Tan was the username used by a group


probably a state intelligence agency


on GitHub to try to attack the xz open source package. The effort aimed at trying to take over the project, and lasted for years. They managed to get a compromised package briefly into the unstable versions of some major Linux distros that created a backdoor in the openssh daemon and came close to being widely deployed across Linux servers, which would have been a very severe compromise of a huge range of systems. The account vanished when the compromise was discovered.

The user here is, as a joke, using the same name.

EDIT:

https://en.wikipedia.org/wiki/XZ_Utils_backdoor

[–] fxomt@lemmy.dbzer0.com 1 points 10 hours ago (1 children)

When they said they were "working on the next big thing in linux", the tip and the username they have, i thought:

https://en.wikipedia.org/wiki/XZ_Utils_backdoor

In February 2024, a malicious backdoor was introduced to the Linux build of the xz utility within the liblzma library in versions 5.6.0 and 5.6.1 by an account using the name "Jia Tan".

Oh, I thought you were calling me out for spam because I posted yesterday or two days ago.

[–] jia_tan@lemmy.blahaj.zone 2 points 11 hours ago

round two

Uuhhhh… 👀 yeah… two