- On the XZ Utils Backdoor (CVE-2024-3094): FOSS Delivered on its Pitfalls and Strengths https://jdsalaro.com/note/xz-liblzma-linux-backdoor-foss-pitfalls-strengths/ 71 comments linux
Linked pages
- oss-security - backdoor in upstream xz/liblzma leading to ssh server compromise https://www.openwall.com/lists/oss-security/2024/03/29/4 3112 comments
- What we know about the xz Utils backdoor that almost infected the world | Ars Technica https://arstechnica.com/security/2024/04/what-we-know-about-the-xz-utils-backdoor-that-almost-infected-the-world/ 622 comments
- Overton window - Wikipedia https://en.wikipedia.org/wiki/Overton_window 546 comments
- GitHub - tukaani-project/xz: XZ Utils https://github.com/tukaani-project/xz 214 comments
- Stuxnet - Wikipedia http://en.wikipedia.org/wiki/Stuxnet 22 comments
- NVD - CVE-2024-3094 https://nvd.nist.gov/vuln/detail/CVE-2024-3094 4 comments
- How one developer just broke Node, Babel and thousands of projects in 11 lines of JavaScript • The Register https://www.theregister.com/2016/03/23/npm_left_pad_chaos/ 0 comments
Would you like to stay up to date with Unix? Checkout Unix
Weekly.