xz backdoor Part 2: On the Importance of Runtime Security in the Age of OSS Backdoors
It’s been a week since the xz backdoor dropped. I stand by my earlier conclusion that the community really dodged a bullet, and this is reaffirmed by many other well-respected…