thesamesam

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Background

On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that

fcfort

var _ = Underscore.load();


var NYSaves = {};

NYSaves.currentPriceUrlBase = 'https://www.nysaves.org/nytpl/fund/details.cs?fundId=';
NYSaves.historyUrl = 'https://www.nysaves.org/nytpl/fund/priceHistorySearch.cs';


/**

conorbuck

var p1 = {
	x: 20,
	y: 20
};

var p2 = {
	x: 40,
	y: 40
};