Welcome to Incremental Social! Learn more about this project here!
Check out lemmyverse to find more communities to join from here!

catsup ,

I love this community

black0ut ,
@black0ut@pawb.social avatar

If you use Arch, you aren't really affected. As far as we know, the backdoor only affects SSH if it is linked against liblzma, which is a requirement for libsystemd. However, Arch doesn't use that, so SSH has probably been safe. However, you should still update, because we don't know if the backdoor could've been used in other ways.

Note that if you update, xz 5.6.1-2 will be installed. This is a safe version. However, if you run xz --version, it will still report version 5.6.1.

slacktoid ,
@slacktoid@lemmy.ml avatar

Be Slackware. Dont use systemd.

MrMobius ,
@MrMobius@sh.itjust.works avatar

Thank you for the warning!

tourist ,
@tourist@lemmy.world avatar

is this really how I find out my system is compromised

Allero ,

Linux be like

jak2k ,

It's fedora 40 BETA not 41.

Blisterexe ,
@Blisterexe@lemmy.zip avatar

both afiak

ReakDuck ,

Since when is the package in the repo?

mumblerfish ,

Depends on distro. But the backdoored package has not been around for more than a few weeks. But the malicious developer have been active for years.

FartsWithAnAccent ,
@FartsWithAnAccent@fedia.io avatar

I am a simple man: I see BBT, I downvote.

FlaminGoku ,

o7

Wes_Dev ,

"It's so funny! Sheldon reminds me of you!"

Yeah, never watched it, but heard this enough to hate the show with a passion.

SpaceCowboy ,
@SpaceCowboy@lemmy.ca avatar

It's a show that normalized hot women dating nerds.

Nerds hate this for some reason.

Wes_Dev ,

...I don't want to date women, so I know know how that's relevant.

SpaceCowboy ,
@SpaceCowboy@lemmy.ca avatar

Sorry, I didn't realize that you were a psychopath that only cares about your own interests.

Wes_Dev ,

So, let me unpack what happened, from my point of view. I'm not complaining or anything, just pointing out how it seemed from my end.

I made a comment that I personally didn't like the show because of how many times people around kept saying I was like the main character.

You replied directly to me implying that nerds should like the show because it normalizes dating them. (Which I agree is a good thing.)

I replied to say that doesn't apply to me, and I'm not sure why it was relevant to my comment.

Finally, you left a comment to call me names.

Do you see how that entire interaction makes no sense from my side of things? I said that I didn't like a show, and you inserted yourself into the conversation to complain that hot women should want to date me because of the show. Then, when I said that had nothing to do with what I was saying, you insulted me.

So, like, why?

FartsWithAnAccent ,
@FartsWithAnAccent@fedia.io avatar

why?

They appear to be a troll, so, trolling?

Wes_Dev ,

Oh. Makes sense. To be honest, I really didn't care enough to bother checking their profile or any other comments. Just saw the response today and wanted to try and offer some sort of olive branch or something. idk

FartsWithAnAccent ,
@FartsWithAnAccent@fedia.io avatar

I'm just going off there comments here, but that's my hot take: Trollin.

FartsWithAnAccent ,
@FartsWithAnAccent@fedia.io avatar

implying hot women can't also be nerds and that nerdy men can't be hot

also implying that a generic sitcom is, in any way, responsible for the way society treats nerds and not the invention of the fact that our modern world is largely nerd creations, resulting in a lot of wealthy nerds

SpaceCowboy ,
@SpaceCowboy@lemmy.ca avatar

Implying that the number of women in STEM fields is exactly the same as the number of men.

Also implying that a sitcom isn't important why it comes to influencing people's perceptions while also being angry over that same sitcom.

Also implying that nerds shouldn't be successful? I don't even know what you're even trying to say.

Lucidlethargy ,
@Lucidlethargy@sh.itjust.works avatar

It's a show that makes nerds the punchline constantly, and the fact they constantly get references wrong shows the creators are everything but nerds.

When people think I should love this show, they are taking on themselves. The same is true whenever it's recommended to anyone.

wurstgulasch3000 ,

I rewatched a few season 1 episodes a few years back. I remember them actually being funny aside from the canned laughter. It ran for way longer than it should have though and got tiring pretty quickly

Hector ,

I heard this for years while the show was running. I refused to watch the show as well. I decided to start watching it recently.

It turns out that what people were referring to when they likened me to Sheldon was my autistic traits. Sheldon incorporates a lot of specific autistic traits in his character and I am autistic. The funny thing is, one of the people that was constantly comparing me to Sheldon was a good friend of mine who was also autistic but I guess she is somewhere else on the spectrum which is why it was easier for her to associate me with Sheldon than herself.

I guess my point is to tell you that sometimes people make uneducated guesses and comparisons that may end up seeming funny when you realize why they made them. Watch the show. Laugh at them for comparing you to an exaggerated TV persona because you were different from what they expect the average person to be.

Grass ,

Some roundabout way of calling you autistic. The show is literal garbage though I tried watching it a few times but it's just akward autistic social interaction with plenty of cringe the tv show. Real life autistic people I know are split between hating it for feeling like they are being made fun of to loving it to the point of memorizing every line word for word and being unable to stop themselves from reciting the lines in time with the episode on the screen which honestly scares the hell out of me.

Floshie ,

Any reason why ? Else than it being a sitecom (which is my number one reason why I never watched it)

I never stumbled upon someone who's hating the show, kinda curious on the arguments

Wogi ,

I'm not op but I hated that fucking show.

They use the 4 male leads to make fun of nerdy, generally neurodivergent coded people. One of the leads is an unrepentant asshole and the show seems to argue that he must be an asshole because he's autistic, though they never explicitly state that.

If you happen to be neurodivergent, and grew up being harassed for expressing some of the same traits represented by those characters, the show leaves an all too familiar, very bitter taste. All the while acknowledging that those characters grew up in exactly the same circumstances the show seeks to recreate for laughs.

If you're a neurodivergent person, the show is saying to you that "you have trouble fitting in in the society you live in, that we've created, and that's funny to us."

ngn OP ,
@ngn@lemy.lol avatar

I'm the op and I didn't even know the show existed

It's a meme template ffs what are yall arguing about?

Wogi ,

Big bang theory was an American sitcom for 9 seasons.

The guy in the center of the image you posted is one of the main characters from the show.

veroxii ,
30p87 ,

Arch isn't affected afaik, as it specifically targeted Debian and RPM. Also, sshd isn't linked against liblzma (or something along those lines). And I hope that's true, because otherwise, I had a backdoor on a public system for over a month.

ReversalHatchery ,

Also, sshd isn't linked against liblzma

Not directly, but it's loaded through libsystemd. It is there.

Edit: except on arch, if you use that. That doesn't use libsystemd

wildbus8979 ,
30p87 ,

And as https://www.openwall.com/lists/oss-security/2024/03/29/4 says:

"These conditions include targeting only x86-64 linux: [...]
Building with gcc and the gnu linker [...]
Running as part of a debian or RPM package build:"

I'm not an expert of course.

bravesilvernest ,
@bravesilvernest@lemmy.ml avatar

Holy shit that was a hell of a dive. And no wonder the dude got it working, he was just pounding those "test and translation" commits

HopFlop ,

Yeah but the backdoor does not work on Arch (as far as we currently know). It relies on a linking of libraries that Arch doesnt do by default.

user224 ,
@user224@lemmy.sdf.org avatar

And the packages on most distros should be long updated by now.

Even Termux updated to 5.6.1+really5.4.5 just 2 hours after Arch Linux.

30p87 ,

I just updated all packages in Termux actually lol

Pantherina ,
user224 ,
@user224@lemmy.sdf.org avatar

What package manager is that?

ngn OP ,
@ngn@lemy.lol avatar

I think it's nala, which is a wrapper for (lib)apt

Pantherina ,

Nala, Termux is Debian based and its pkg is basically apt

velox_vulnus ,

I'm on 5.2.8, so I'm safe (am I?)

Rezzit ,

As far as I know, yes

mumblerfish ,

Gentoo rolled back to 5.4.2 to have a version without any contributions from the person responsibe for the backdoor. 5.2.8 should be ok I'd say.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • memes@lemmy.ml
  • incremental_games
  • meta
  • All magazines