Linux

10300 readers

659 users here now

A community for everything relating to the GNU/Linux operating system (except the memes!)

Also, check out:

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 2 years ago

MODERATORS

Ategon@programming.dev

anzo@programming.dev

dwraf_of_ignorance@programming.dev

BombShell: The Signed Backdoor Hiding in Plain Sight on Framework Devices - Eclypsium | Supply Chain Security for the Modern Enterprise (eclypsium.com)

submitted 1 month ago by cm0002@lemdro.id to c/linux@programming.dev

8 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] surfrock66@lemmy.world 52 points 1 month ago (1 children)

I really dislike this headline. A vulnerability was found, responsibly disclosed, and the vendor was responsive and is planning/pushing a fix. The headline drowns a successful mitigation in flowery language of controversy. The article also shows how this can happen on other vendor devices, but the headline here looks like just Framework messed up, when they're the only vulnerable vendor with a fix in the pipeline (based on the info in the article). I really hate headline-bait journalism.

[–] stewie410@programming.dev 17 points 1 month ago

Titling choice probably fueled by their otherwise unrelated ongoing controversy, if I had to guess.

More blood for the blood god.