Most cited

Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 76 posts.

Security & Privacy
2024
21

Timeline of the xz open source attack

Over a period of over two years, an attacker using the name “Jia Tan” worked as a diligent, effective contributor to the xz compression library, eventually being granted commit access and maintainership. Using that access, they installed a very subtle, carefully hidden backdoor into liblzma, a part of xz that also…