There’s a compression library called xz-utils. You’ve never heard of it. It’s in every Linux distribution, most servers, probably your phone. One guy maintains it. Or he did, until recently. This year, someone found a backdoor in xz-utils. Not a bug. A deliberate backdoor, carefully hidden over months through seemingly …

Read More