jamespfennell/xz
View on GitHub ↗ ★ 13 C archived
xz compression in Go
5 mentions on Hacker News by 5 people: 0 stories, 5 comments · first 2024-03-29 · latest 2026-02-26
20082026
-
…org/node/everything-i-know-about-the-xz-backdo... This is the scariest part to me: > A pull request ( https://github.com/jamespfennell/xz/pull/2 ) to a go library by a 1Password employee is opened asking to upgrade the library to the…
comment by ting0 · 2026-02-26 · in Story of XZ Backdoor [video] -
Hey all, I’m the author of that PR. Just posted to Github with additional context: https://github.com/jamespfennell/xz/pull/2#issuecomment-2027...
comment by jaredallard2 · 2024-03-30 · in Backdoor in upstream xz/liblzma leading to SSH server compromise -
…to get them to update dependencies. I think the timing is comically bad, but I can vouch for Jared. https://github.com/jamespfennell/xz/pull/2
comment by lelandbatey · 2024-03-29 · in Backdoor in upstream xz/liblzma leading to SSH server compromise -
…an outlier, the other attacker accounts were cutouts. So this doesn't quite make sense to me. [1] https://github.com/jamespfennell/xz/pull/2/commits
comment by computerfriend · 2024-03-29 · in Backdoor in upstream xz/liblzma leading to SSH server compromise -
…years ago I wrote a Go library that wraps the xz C code and allows you to do xz compression in Go: https://github.com/jamespfennell/xz About a week ago I received the first PR on that repo, to upgrade to 5.6.1. I thought it was odd to get…
comment by returningfory2 · 2024-03-29 · in Backdoor in upstream xz/liblzma leading to SSH server compromise