thesamesam

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Update: I've disabled comments as of 2025-01-26 to avoid everyone having notifications for something a year on if someone wants to suggest a correction. Folks are free to email to suggest corrections still, of course.

Background

rolfvreijdenberger

#!/bin/bash
# creates a private key from a 'brain wallet'
if [ -z "$1"  ]; then
 echo "provide the bitcoin brain wallet seed to get the private key:";
 read SEED;
else
 SEED=$1;
fi
echo "seed (brain wallet): $SEED";
echo -n "bitcoin private key: ";