HackerTube
HomeLongsLikedHistoryWatch laterCategoriesPlaylistsSettings

The Internet Was Weeks Away From Disaster And No One Knew

Veritasium1 HN recommender · recommended in 1 month, 2026-2026
YouTube
16.4M views · 8 months ago · documentary · evergreen

Veritasium tells the story of the XZ backdoor, how a patient attacker became maintainer and nearly compromised SSH on Linux systems. It also covers free software history and how encryption in SSH works.

Cited as an accessible, documentary-style account of the XZ backdoor in supply chain security discussions.

Security & hackingLinux & open-source ecosystemsCryptography#xz#supplychainattack#linux#ssh#opensourcesecurity

4 comments from Hacker News

@rolandog2026 · in “Nvim-treesitter (13K+ Stars) is Archived”

Agreed. However, I often wonder if people like that are deliberately (or inadvertently) being a psyop seeking to burn out people ala how "Jia Tan" tried to become maintainer of xz [0]. [0] ▶ this video

CitesView on HN
@ajoy2026 · in “Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised”

Reminded me of a similar story at openSSH, wonderfully documented in a "Veritasium" episode , which was just fascinating to watch/listen. ▶ this video

RecommendsView on HN
@briansm2026 · in “The Xkcd thing, now interactive”

Just to mention the original was cited in the most recent Veritasium video: "The Internet Was Weeks Away From Disaster and No One Knew" ▶ this video (at about the 9:50 mark)

CitesView on HN
@nerevarthelame2026 · in “Story of XZ Backdoor [video]”

Still no smoking gun, but possibly Russia. From the video ▶ this video : > A lot of the aliases, like Jia Tan, they sound like Asian names, and the published changes are all timestamped in UTC+8, Beijing time. So the signs point to China. And that's why it's probably not China. I mean, why would they make it that obvious? Every other part of the operation has been so meticulous, so cautious. > And they also worked on Chinese New Year, but not on Christmas. And over the years, there were nine changes that fall outside of the Beijing time into UTC+2, which is a time zone that includes Israel and parts of Western Russia. That's why some experts have speculated that this could be the work of APT29, a Russian-state-backed hacker group also known as Cozy Bear. But again, do we know? No, of course we don't know who it is, and we likely will never know.

CitesView on HN
LibreSSL: The first 30 days, and what the Future Holds1:05:51

LibreSSL: The first 30 days, and what the Future Holds

Andrea Ross
5K views • 12 years ago
GOD MODE UNLOCKED - Hardware Backdoors in x86 CPUs51:00

GOD MODE UNLOCKED - Hardware Backdoors in x86 CPUs

Black Hat
319K views • 8 years ago
Linus Torvalds - Backdoor In Linux0:27

Linus Torvalds - Backdoor In Linux

Sam Abdullaev
155K views • 13 years ago
Hackfest 2015: Theo de Raadt presented "Pledge: A new security technology in openbsd"53:53

Hackfest 2015: Theo de Raadt presented "Pledge: A new security technology in openbsd"

Hackfest Communication
27K views • 10 years ago
A Narrative History of BSD, Dr. Kirk McKusick53:55

A Narrative History of BSD, Dr. Kirk McKusick

bsdconferences
30K views • 17 years ago
BlueHat IL 2019 - Andrew "bunnie" Huang - Supply Chain Security: "If I were a Nation State...”45:38

BlueHat IL 2019 - Andrew "bunnie" Huang - Supply Chain Security: "If I were a Nation State...”

Microsoft Israel R&D Center
21K views • 7 years ago
Revolution OS1:25:10

Revolution OS

Von Hash
208K views • 14 years ago
[HOPE X] Elevator Hacking: From the Pit to the Penthouse1:55:54

[HOPE X] Elevator Hacking: From the Pit to the Penthouse

themarimbaincident
40K views • 12 years ago
DEF CON 26  - Christopher Domas - GOD MODE UNLOCKED Hardware Backdoors in redacted x8646:04

DEF CON 26 - Christopher Domas - GOD MODE UNLOCKED Hardware Backdoors in redacted x86

DEFCONConference
86K views • 8 years ago
"A Political History of X" - Keith Packard (LCA 2020)45:33

"A Political History of X" - Keith Packard (LCA 2020)

linux.conf.au
52K views • 6 years ago
34C3 -  Console Security - Switch56:50

34C3 - Console Security - Switch

media.ccc.de
135K views • 8 years ago
Satoshi Has No Clothes: Failures in On-Chain Privacy by Ian Miers (Devcon4)24:20

Satoshi Has No Clothes: Failures in On-Chain Privacy by Ian Miers (Devcon4)

Ethereum Foundation
5K views • 7 years ago
Theo de Raadt (ruBSD 2013)13:47

Theo de Raadt (ruBSD 2013)

fuckyoustupidzombie
41K views • 12 years ago
36C3 -  A systematic evaluation of OpenBSD's mitigations53:02

36C3 - A systematic evaluation of OpenBSD's mitigations

media.ccc.de
18K views • 6 years ago
Florian Grunow, Niklaus Schiess: Lifting the Fog on Red Star OS56:52

Florian Grunow, Niklaus Schiess: Lifting the Fog on Red Star OS

media.ccc.de
46K views • 10 years ago
LibreSSL with Bob Beck1:05:45

LibreSSL with Bob Beck

Jason Tubnor
25K views • 12 years ago
36C3 -  Open Source is Insufficient to Solve Trust Problems in Hardware1:00:46

36C3 - Open Source is Insufficient to Solve Trust Problems in Hardware

media.ccc.de
13K views • 6 years ago
GrapheneOS: Documenting Numerous Attacks Against CalyxOS,, Techlore, & More53:40

GrapheneOS: Documenting Numerous Attacks Against CalyxOS,, Techlore, & More

Techlore
135K views • 5 years ago
Kim Nilsson - Cracking MtGox38:22

Kim Nilsson - Cracking MtGox

TheBitcoinArmy
47K views • 9 years ago
The Most Powerful Computers You've Never Heard Of20:13

The Most Powerful Computers You've Never Heard Of

Veritasium
13.7M views • 4 years ago