Russ Cox personal blog
Timeline of the xz open source attack
Over a period of over two years, an attacker using the name “Jia Tan” worked as a diligent, effective contributor to the xz compression library, eventually being granted commit access and maintainership. Using that access, they installed a very subtle, carefully hidden backdoor into liblzma, a part of xz that also…
- Points
- 1,069
- HN comments
- 459
- Submissions
- 1
- Cited by
- 9 commenters
Security & PrivacyOpen Source2024
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Apr 2, 2024 | Timeline of the xz open source attack by todsacerdoti | 1,069 | 459 |
Cited in comments
Linked from 9 Hacker News comments by 9 different people, from Apr 2024 to Feb 2026.
Most recent:
- smithza · Feb 11, 2026
- kreyenborgi · May 16, 2024
- cratermoon · Apr 14, 2024
- joshkel · Apr 10, 2024
- cesarb · Apr 7, 2024
- planede · Apr 4, 2024
