The XZ Backdoor: Two Years of Patience, Caught by Luck
A fake volunteer spent two years earning trust to plant a backdoor in software running much of the internet, caught days from disaster by a half-second delay. Part twelve of a series on attacks that beat isolation.











