nuno.sh Blog
The XZ compromise is not your typical security vulnerability. This security flaw was deliberately introduced by a malicious actor, over the course of many months, in open-source software that is foundational to the internet.
Russia's currency lost 40% of its value in a week; Russians are fleeing the ruble and buying cryptocurrency. But so are their Ukrainian neighbours, who have lost their life savings when centralised institutions in their country failed.
As the world sides with Ukraine, so does the cyber world; thousands of volunteers attack Russia at the "cyber front".
Personal safety and information security go hand-in-hand in modern warfare. Telegram is marketed as secure, but the lack of end-to-end encryption by default means that the conversation history, social graph, and geolocation of Ukrainians fighting for their lives could leak to the Russian regime.