XZ Utils and "Half a Second": Autopsy of the supply chain attack that nearly compromised the Internet
Two years of social engineering, a backdoor hidden in build scripts, and detection via a 500-millisecond SSH latency spike. The book *Half a Second* reconstructs CVE-2024-3094—and extracts lessons every developer must learn.
Aug 31, 2026 15 3
