Field notes
All writingRSSAbout

Topic

security

1 post

XZ Utils Backdoor: A Technical Deep Dive

How a two-year-long social engineering effort inserted a backdoor into xz/liblzma's release tarballs, and how a Postgres developer's curiosity about slow SSH logins caught it.

10 Sept 2026 · 6 min

All writingArchiveTopicsAboutPrivacyRSS

© 2026 Field notes