The XZ exploit: The day the internet got lucky

https://is1-ssl.mzstatic.com/image/thumb/Podcasts125/v4/f1/c0/49/f1c0494f-4525-23ff-d8fc-88613b6d5ccc/mza_9879060543993059329.jpg/600x600bb.jpg

Technology Pill

Privacy International

94 episodes

6 days ago

Find out how technology is reshaping our lives every day and explore the new powers of governments and companies.

Technology

RSS

All content for Technology Pill is the property of Privacy International and is served directly from their servers with no modification, redirects, or rehosting. The podcast is not affiliated with or endorsed by Podjoint in any way.

Find out how technology is reshaping our lives every day and explore the new powers of governments and companies.

Technology

https://d3t3ozftmdmh3i.cloudfront.net/production/podcast_uploaded_nologo/3448418/3448418-1610538873523-a8397ebe0012e.jpg

The XZ exploit: The day the internet got lucky

Technology Pill

54 minutes 55 seconds

1 year ago

The XZ exploit: The day the internet got lucky

This week we're talking about a backdoor inserted into a popular Linux file compression tool, which had the potential to massively undermine the security of vast swathes of the internet. What happened? How did it happen? And how was it thwarted?

Links

- Andres Freund's Mastodon - where he revealed the backdoor: https://mastodon.social/@AndresFreundTec

- Read more in Ars Technica's article about it: https://arstechnica.com/security/2024/03/backdoor-found-in-widely-used-linux-utility-breaks-encrypted-ssh-connections/ - Read more in the verge's article about it https://www.theverge.com/2024/4/2/24119342/xz-utils-linux-backdoor-attempt
- Read more in Wired's article about it https://www.wired.com/story/jia-tan-xz-backdoor/ - Check out this excellent and very helpful diagram: https://twitter.com/fr0gger_/status/1775759514249445565 - The XKCD comic we mention: https://xkcd.com/538/