xz Backdoor and Other News скачать в хорошем качестве

xz Backdoor and Other News

We start with some short commentary on a few things that piqued Alex' interest, and then we move to the main topic: the xz backdoor. For a few years, a malicious actor managed to gain enough credibility in the xz / libxzma project to gain maintainer status, which they then used to try and push an obfuscated backdoor into virtually every Linux distribution and in many projects that use this open source library. The story is spectacular, and Alex is reviewing and commenting the whole thing. New video published every Saturday, 4.45 am UTC. Links: Tim Ottinger on story points and time https://twitter.com/tottinge/status/1... Question about what is a domain model   / 1775298084219797679   Attack vector due to LLMs hallucinating inexistent packages https://techhub.social/@Techmeme/1121... xz backdoor history visualized https://twitter.com/fr0gger_/status/1... xz backdoor timeline https://boehs.org/node/everything-i-k... Open source maintainers owe you nothing https://mikemcquaid.com/open-source-m... xkcd on modern digital infrastructure https://xkcd.com/2347/ Alex Bolboaca is a programmer, CTO, author, trainer and coach at Mozaic Works. Mozaic Works provides high quality, customized training, coaching, and advice for companies who want to improve their effectiveness in the market, mainly through the use of modern leadership and technical practices. Check out our offer and ask us questions at https://mozaicworks.com. Think. Design. Work Smart.