Pope Xzorcist I

Encyclical

"Quingenti Millesimi". For two years a patient contributor won the trust of xz's overworked maintainer, then hid an sshd backdoor in the release tarballs. Andres Freund spotted it, because SSH logins had become about half a second slower, before it reached stable distributions. The year taught that the open source supply chain rests on people, often alone, and that one engineer's curiosity is worth more than many tools.

Saint page: Saint xzorcist, Who Cast Out the Backdoor

Cardinals

Saint regreSSHion · Saint ConnectAround, Who Enters Through the VPN