Best of 2024

The blog posts Hacker News loved most in 2024. 83 posts.

Open Source
2

Timeline of the xz open source attack

Over a period of over two years, an attacker using the name “Jia Tan” worked as a diligent, effective contributor to the xz compression library, eventually being granted commit access and maintainership. Using that access, they installed a very subtle, carefully hidden backdoor into liblzma, a part of xz that also…

10

The xz attack shell script

Andres Freund published the existence of the xz attack on 2024-03-29 to the public oss-security@openwall mailing list. The day before, he alerted Debian security and the (private) distros@openwall list. In his mail, he says that he dug into this after “observing a few odd symptoms around liblzma (part of the xz…

17

WP21

It seems like just yesterday WordPress was becoming a teenager, and in a blink of the eye it’s now old enough to drink! 21 years since Mike and I did the first release of WordPress, forking Michel’…

27

Kate editor on all platforms

Unix like systems with X11 or Wayland All Unix like systems with either X11 or Wayland are well supported since ever. Linux with X11 and now Wayland is for a long time the primary system on that Kate work happens. Over the years it was, like most of the KDE applications, ported to various BSD variants. Be it some…