Russ Allbery <r...@debian.org> wrote: > I think this question can only be answered with reverse-engineering of the > backdoors, and I personally don't have the skills to do that.
In the pre-disclosure discussion permission was asked to share the payload with a company specialising in such reverse engineering. If that went through, I'd expect results to be publicly available in the next days. Cheers, Moritz