Russ Allbery <rra@debian.org> wrote:
> I think this question can only be answered with reverse-engineering of the
> backdoors, and I personally don't have the skills to do that.
In the pre-disclosure discussion permission was asked to share the payload
with a company specialising in such reverse engineering. If that went
through, I'd expect results to be publicly available in the next days.
Cheers,
Moritz