A decompressor is an interpreter for hostile input: here's what that costs to ship safely

← 피드로

A compression library is a uniquely dangerous thing to ship. It's small, fast, and dependency-light — which is exactly why it ends up linked into web servers, firmware, package managers, and SSH daemons, sitting in everyone's hot path. When xz was backdoored in early 2024…

원문 보기 ↗