2 April 2024 The Crux #87: Open Source Backdoors Things to note An attempt to backdoor SSH was discovered over the weekend, via a library called xz. Kevin Beaumont wrote a good summary. A lot of people who were experts in bridges and civil engineering last week are now C programming and open source supply chain experts this week. For the vast majority of people, you don't have to do anything. Just wait for the more distractable elements to move on to whatever shiny object they see next while...