The big story right now is the recently uncovered backdoor in _liblzma_ (aka _XZ_) – a relatively obscure compression library that happens to be a dependency of OpenSSH.
This incident is noteworthy for so many reasons: the exploit itself, how it was deployed, how it was found, what it says about our industry & how the community reacted. Let's dig in!
Who in the world is Jia Tan? (News) | The Changelog: Software Development, Open Source podcast - Listen or read transcript on Metacast
