A reminder of why it’s good to analyze your project’s binaries. Test data, famously, but also firmware blobs, etc.
Why the black flag, though? That's a symbol of anarchy, which kinda suggests some kind of endorsement to me. But that also doesn't make sense because the Jia Tan affair was an attack on the commons, which is absolutely opposed to anarchist values.
I cringed when I saw that
Yeah, an explanation would be nice, or perhaps a demonstration of whatever he has in mind that involves xz. That would make for a good demo.
The demo screencaps are of the xz binary.
What I tried to emphasize is documentation, like how Binsider may have helped mitigate security issues (or help raise awareness of potential issues) with regarding to xz.