Git Good S1E19 2026-02-21

Trust and the Supply Chain

On March 29, 2024, engineer Andres Freund noticed SSH logins were half a second slower than normal — and uncovered a deliberate backdoor hidden inside a compression library trusted by millions.

25:35 kokoro:bm_lewis

Trust Infrastructure

Connections

OpenSSL: The Lock on Every Door Heartbleed was accidental; xz was deliberate
left-pad: Eleven Lines fragility of the dependency chain, from different angles
pip install: The Invention of Trust the trust infrastructure that xz exploited was built incrementally
Five Good Decisions, One Bad System a half-second performance anomaly caught the backdoor
One Point Five Seconds: A Disaster in Slow Motion both stories hinge on someone noticing a tiny latency change