changelog.com

Who in the world is Jia Tan? (Changelog News #88)

The big story right now is the recently uncovered backdoor in liblzma (aka XZ) – a relatively obscure compression library that happens to be a dependency of OpenSSH. This incident is noteworthy for so