Software Engineering Radio - the podcast for professional software developers

SE Radio 630: Luis Rodríguez on the SSH Backdoor Attack

Aug 22, 2024
Luis Rodríguez, CTO of Xygeni.io, discusses a recent SSH backdoor attack that posed a threat to over 20 million servers. He details how the malicious code was inserted via a compromised compression library and the sophisticated social engineering employed by the attacker. The conversation highlights the limitations of traditional exploit detection methods and the implications for open source security. Rodríguez emphasizes the importance of community vigilance in identifying legitimate contributions to prevent future incidents.
Ask episode
Chapters
Transcript
Episode notes