Record · corpus.blog/posts/01a0bbf5-145b-7186-98e4-b6e13f196c5f

xz Backdoor

Michael Tsai · published 1 April 2024

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at mjtsai.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 61
Words captured: 1,891

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://www.theregister.com/2024/03/29/malicious_backdoor_xz/

theregister.com

https://access.redhat.com/security/cve/CVE-2024-3094

access.redhat.com

https://arstechnica.com/security/2024/04/what-we-know-about-the-xz-utils-backdoor-that-almost-infected-the-world/

arstechnica.com

https://news.ycombinator.com/item?id=39891607

news.ycombinator.com

https://www.openwall.com/lists/oss-security/2024/03/29/4

openwall.com

https://mastodon.social/@AndresFreundTec/112180083704606941

mastodon.social

https://news.ycombinator.com/item?id=39865810

news.ycombinator.com

https://bsky.app/profile/filippo.abyssdomain.expert/post/3kowjkx2njy2b

bsky.app

https://news.ycombinator.com/item?id=39877267

news.ycombinator.com

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1068024

bugs.debian.org

https://news.ycombinator.com/item?id=39873011

news.ycombinator.com

https://twitter.com/Devon_Eriksen_/status/1774094415235092494

twitter.com

Everything I Know About the XZ Backdoor Read at the source ↗

boehs.org

https://rheaeve.substack.com/p/xz-backdoor-times-damned-times-and

rheaeve.substack.com

https://news.ycombinator.com/item?id=39889286

news.ycombinator.com

https://github.com/amlweems/xzbot

github.com

https://news.ycombinator.com/item?id=39895344

news.ycombinator.com

https://freedom-to-tinker.com/2013/10/09/the-linux-backdoor-attempt-of-2003/

freedom-to-tinker.com

https://mastodon.social/@regehr/112180583203758548

mastodon.social

https://twitter.com/haxrob/status/1773937085524979870

twitter.com

https://twitter.com/amasad/status/1774484599231611242

twitter.com

https://twitter.com/perrymetzger/status/1774489961867202891

twitter.com

https://twitter.com/robmen/status/1774067844785086775

twitter.com

https://gynvael.coldwind.pl/?lang=en&id=782

gynvael.coldwind.pl

https://news.ycombinator.com/item?id=39878681

news.ycombinator.com

A Microcosm of the interactions in Open Source projects Read at the source ↗

robmensching.com

https://news.ycombinator.com/item?id=39879710

news.ycombinator.com

https://blog.glyph.im/2024/03/software-needs-to-be-more-expensive.html

blog.glyph.im

https://twitter.com/thegrugq/status/1774392858101039419

twitter.com

https://twitter.com/lukOlejnik/status/1774459347117949207

twitter.com

https://twitter.com/_saagarjha/status/1774433814754001347

twitter.com

https://twitter.com/julianor/status/1774130812721488205

twitter.com

https://rigor-mortis.nmrc.org/@simplenomad/112184869681420177

rigor-mortis.nmrc.org

https://news.ycombinator.com/item?id=39888059

news.ycombinator.com

https://mastodon.social/@isaiah/112193539687357640

mastodon.social

https://twitter.com/feross/status/1774153518800404494

twitter.com

On the Insecurity of Software Bloat Read at the source ↗

mjtsai.com

The Lack of Compensation in Open Source Software Is Unsustainable Read at the source ↗

mjtsai.com

Mac Software Updates Open Up sshd Read at the source ↗

mjtsai.com

SolarWinds Breach Read at the source ↗

mjtsai.com

Timeline of the xz open source attack Read at the source ↗

research.swtch.com

https://news.ycombinator.com/item?id=39902241

news.ycombinator.com

https://twitter.com/_Mark_Atwood/status/1774935413834367445

twitter.com

https://twitter.com/FFmpeg/status/1775178803129602500

twitter.com

The xz attack shell script Read at the source ↗

research.swtch.com

https://news.ycombinator.com/item?id=39903685

news.ycombinator.com

https://lwn.net/SubscriberLink/967192/6c39d47b5f299a23/

lwn.net

https://news.ycombinator.com/item?id=39911311

news.ycombinator.com

https://rachelbythebay.com/w/2024/04/02/autoconf/

rachelbythebay.com

https://www.schneier.com/blog/archives/2024/04/xz-utils-backdoor.html

schneier.com

https://threadreaderapp.com/thread/1776691497506623562.html

threadreaderapp.com

https://news.ycombinator.com/item?id=39956455

news.ycombinator.com

https://daringfireball.net/linked/2024/04/05/xz-back-door

daringfireball.net

https://belkadan.com/blog/2024/04/XZ-Gon-Give-It-To-Ya/

belkadan.com

Discovering the XZ Backdoor with Andres Freund Read at the source ↗

share.transistor.fm

https://mastodon.social/@ahl/112247364553050315

mastodon.social

https://www.schneier.com/blog/archives/2024/04/backdoor-in-xz-utils-that-almost-happened.html

schneier.com

https://thenewstack.io/linux-xz-backdoor-damage-could-be-greater-than-feared/

thenewstack.io

https://news.ycombinator.com/item?id=40143301

news.ycombinator.com

XZ backdoor story – Initial analysis Read at the source ↗

securelist.com

https://news.ycombinator.com/item?id=40017310

news.ycombinator.com