Post #2171016

2024-04-03 00:46 UTC

Recently, the software world was rocked by the discovery of a backdoor in XZ Utils. The backdoor represents many stories, but behind all of them is the story of a single Postgres developer, vexed by a relatable problem: &quot;why is it taking so long to login?!&quot; On the next Oxide and Friends, @ahl and I are thrilled to be joined by that developer, @AndresFreundTec, the discoverer of the XZ backdoor. Join us on April 8th at 5p Pacific to hear this extraordinary story! https://discord.gg/SAsE6G6W?event=1224880997762338856

Replies (8)

@mikeolson@mastodon.social 2024-04-03 00:47

@bcantrill@mastodon.social @ahl@mastodon.social @AndresFreundTec@mastodon.social Dude. Good get!

Open ##3137298
@funkylab@mastodon.social 2024-04-03 01:02

@bcantrill@mastodon.social @ahl@mastodon.social hmmm but how I read @AndresFreundTec@mastodon.social 's description that's not actually what happened: he was microbenchmarking and wondered why ssh was using significant CPU in the absence of actual logins. Not that logins took long.

Open ##3137299
@carlana@tech.lgbt 2024-04-03 01:15

@bcantrill@mastodon.social you should have booked Jia Tan smdh

Open ##3137301
@frew@mastodon.social 2024-04-03 03:09

@bcantrill@mastodon.social @ahl@mastodon.social @AndresFreundTec@mastodon.social awesome, looking forward to this! Would love if @gynvael@infosec.exchange , @lcamtuf@infosec.exchange , @amlw@infosec.exchange would join!

Open ##3137302
@jawnsy@mastodon.social 2024-04-03 04:57

@bcantrill@mastodon.social @ahl@mastodon.social @AndresFreundTec@mastodon.social Look at Bryan out here flaunting his media prowess to get an interview like this! 🙌

Open ##3137303
@rasmus91@fosstodon.org 2024-04-03 07:32

@bcantrill@mastodon.social @ahl@mastodon.social @AndresFreundTec@mastodon.social okay then, i will.

Open ##3137308
@AndresFreundTec@mastodon.social 2024-04-03 18:10

@bcantrill@mastodon.social @ahl@mastodon.social Now we just need to avoid derailing into a heated debate about solaris/illumos being good/bad...

Open ##3137309
@wlf_warren@pebble.social 2024-04-08 22:30

@bcantrill@mastodon.social @ahl@mastodon.social @AndresFreundTec@mastodon.social Exactly how they found it, that log-in delay was a 'signal' that something wasn't correct, and how they found it!

Open ##3137312