Things I learned writing systems-level with Go for FreeBSD that nobody told me 1/ Go’s runtime uses kqueue on BSD great for performance, but debugging epoll assumptions in third-party libs will wreck your afternoon.
Afshin Tavahin
@tavahin.bsky.social
InfoSec pro who fell in love with Golang. threat hunting, binary security and blazing-fast code. Cat person. 🐱🔐 🇸🇪
Woah. Backdoor in liblzma targeting ssh servers. www.openwall.com/lists/oss-se... It has everything: malicious upstream, masterful obfuscation, detection due to performance degradation, inclusion in OpenSSH via distro patches for systemd support… Now I’m curious what it does in RSA_public_decrypt
oss-security - backdoor in upstream xz/liblzma leading to ssh server compromise
openwall.com