Andres Freund

EXECUTIVE INTELLIGENCE SUMMARY

Principal software engineer who discovered and prevented the historic CVE-2024-3094 XZ Utils supply chain backdoor through meticulous CPU performance profiling.

While benchmarking sshd latency micro-delays on Debian sid, uncovered an obfuscated multi-stage multi-year social-engineering backdoor planted inside liblzma / xz tarball distributions by the actor "Jia Tan".

SOURCE CITATIONS & ATTESTATIONS (1)

Openwall oss-security mailing list disclosureOpenwall Project

oss-security: backdoor in upstream xz/liblzma

TELEMETRY CARDID: person-andres-freund

ENTITY TYPE

person

INDEXED TAGS

#supply_chain#performance_analysis#open_source_security#backdoor_detection

CONNECTED ENTITIES (2)VIEW IN GRAPH →