Blogs / Personal blogs

Gynvael Coldwind

gynvael.coldwind.pl

Mostly technical blog of Gynvael Coldwind, a security researcher and progammer.

Popular posts
3
Total points
830
HN comments
432
Rank
#2,752 personal

Visit gynvael.coldwind.pl → RSS feedOn Hacker News Nov 2015 – May 2026

Software Engineering 3Programming Languages 2Security & Privacy 1

1

Xz/liblzma: Bash-stage Obfuscation Explained

Yesterday Andres Freund emailed oss-security@ informing the community of the discovery of a backdoor in xz/liblzma, which affected OpenSSH server (huge respect for noticing and investigating this). Andres' email is an amazing summary of the whole drama, so I'll skip that. While admittedly most juicy and interesting…