grief seed oil disrespecter @softminus software engineers will notice half a second of latency in something that should be ~instant and will move heaven and earth to fix it, or at least to understand

grief seed oil disrespecter
@softminus
software engineers will notice half a second of
latency in something that should be ~instant
and will move heaven and earth to fix it, or at
least to understand why; and this seems to have
blown an operation that had started to install a
backdoor on every Debian/Ubuntu SSH server
HaxRob @haxrob
Plans to literally "hack the planet" foiled due to
of latency that Andres instinctually
investigated.
The latency was due how the malicious code
parsed symbol tables in memory.
openwall.com/lists/oss-secu...
With the backdoored liblzma installed, logins via ssh become а lot slower
time ssh [email protected]
before:
[email protected]: Permission denied (publickey).
before
user
real
sys
after:
[email protected]: Permission denied (publickey).
user
real
sys