Unveiling the Intrigue, From Core Developer to Covert Operative in the Open-Source Realm

In recent days, a vulnerability (https://gist.github.com/thesamesam/223949d5a074ebc3dce9ee78baad9e27) in the open-source project xz has been exposed. As security researchers delve into the root cause and the entire process leading to this vulnerability, one can’t help but marvel at the meticulousness of the hacker’s mind.

It’s like watching a spy thriller unfold, as they stealthily progress from being a regular contributor to a core developer, eventually gaining direct commit access, all within two and a half years, to surreptitiously implant a backdoor.

Two Forms the Vulnerabilities

The first involves flaws in the code of software or the operating system itself. Under certain circumstances, these flaws may manifest issues. Hackers exploit these vulnerabilities by studying the code of the operating system or software, or by employing certain methods to construct specific attack processes and data.

For example, every year there are security competitions for various computers and phones. Experts who can use certain methods to crack systems have the opportunity to win handsome rewards.

The second form entails hackers embedding viruses in webpages or implanting them in certain…