On: Ask HN: How bad is the xz hack?

[junon]

This is probably the worst backdoor in history in the open source sphere, if not ever.

Certainly the worst of my career.

[diffeomorphism → junon]

Worst as in "bad" or worst as in "did not have any impact as a backdoor"?

[junon → diffeomorphism]

Bad. And we don't know if the intended target, if any, was ever hit. They might still have gotten what they wanted.

In terms of severity and nefarious intent, it's probably the worst that's happened.

[formerly_proven → diffeomorphism]

Both? This is eternal blue, Linux edition, except it was never shipped.

[kator → junon]

My favorite was sendmail's WIZ followed by SHELL bug.