EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Hacker News·7d ago·5 min read
OpenSSH Ships on Every Mac, Linux Server and Windows. Its Creator Trusts No One
TL;DR
A sophisticated backdoor was nearly introduced into OpenSSH via the liblzma compression library, but was thwarted by a vigilant engineer's CPU usage anomaly detection.
✦ Why It Matters
Review and monitor your code dependencies for unusual behavior to prevent similar security threats.
Key Takeaways
- Regularly audit third-party libraries for vulnerabilities.
- Encourage a culture of vigilance among developers.
- Implement monitoring for unusual system behavior.
- Stay informed about security incidents in open-source projects.
Full Summary
OpenSSH, a critical software for secure remote access, faced a potential backdoor threat when an attacker, Jia Tan, cleverly embedded malicious code within the liblzma compression library. This library, largely unnoticed by the broader tech community, was manipulated over two years, with the attacker gaining access to its codebase by contributing helpful patches.
The malicious payload was designed to activate once included in stable releases of major Linux distributions, potentially compromising countless servers worldwide. However, Microsoft engineer Andres Freund detected an unusual increase in CPU usage during SSH logins, prompting him to investigate further.
His diligence led him to uncover the backdoor hidden within liblzma, preventing a significant security breach. This incident highlights the importance of vigilance in software maintenance and the potential risks associated with open-source contributions.