.xz Utils Backdoor: When source code lies, the runtime doesn’t.
For those who haven’t seen it, A backdoor in the widely used xz Utils package was discovered on March 29. This vulnerability allowed for remote code execution during SSH operations on affected systems. The backdoor was introduced by a contributor named “Jia Tan,” who built trust over three years and persistently nagged the sole maintainer. Fortunately, the backdoor was detected before widespread adoption, which could have had catastrophic consequences for Linux and MacOS systems. Andres highlights that the process was filled with coincidences that many might have overlooked, potentially leading to its widespread unnoticed implementation. A large factor in uncovering this issue was the open-source nature of xz Utils, which allowed Andres to investigate further when standard tools failed to identify the problem. Had xz Utils not been open-source, Andreas might have simply filled an issue, reverted to a previous version of the package for PostgreSQL, resolving his immediate issue without uncovering the deeper problem. However, identifying the backdoor was far from straightforward from there for Andres. It wasn’t present in the code on git but was hidden within a seemingly normal, albeit obfuscated, test file. This file was executed as part of the release process, subsequently injecting the backdoor into the actual release. This incident shows how critical it is to see what is going on inside running processes. As illustrated, numerous steps between the source code and releasing a package can alter the code, whether to introduce backdoors or to change configuration settings to production environments. This incident has reinforced my belief that we, developers, need tools that analyze the actual running process rather than just the source code.
Exciting Milestones and a Year of Growth!
🎉 Exciting Milestones and a Year of Growth! 🚀 Today marks the exact day when it all began! What a fantastic journey it has been for CodeGlass! 🙌 In 2022, we started with an incredible opportunity by being chosen to participate in IMEC, where we later emerged as one of the startups to receive mentorship and support. This marked the beginning of our incredible journey. Over the course of this year, we’ve grown from strength to strength, expanding our team to a remarkable 6 members, and there are more incredible talents to come on board. We’ve had the privilege of attending unique events, making connections, and even embarking on a memorable trip to London, soaking in inspiration from all corners of the world. But that’s not all! 🌟 CodeGlass was chosen as one of the next icons of 2023, and we couldn’t be prouder! This year has been a true learning curve, filled with intense discussions, long days, and late nights of hard work. We welcomed our first customers and established invaluable partnerships. And guess what? The excitement continues! In just a few days, we’ll be heading to Slush, and in a couple of months, our journey to CES will kick off. The future is bright, and there’s so much more to come. As we look back with pride on this incredible year, we’re filled with hope and determination for the many more years of innovation, success, and growth that lie ahead. 🌠 Thank you for being part of our journey. We can’t wait to see what the future holds!
Meet Developer Joost
Meet Joost, a rising star in our CodeGlass team and a true tech enthusiast! Joost’s Journey: Hello, I’m Joost Godschalk, and my journey into the world of technology began with a YouTube video recommendation. Five minutes to speed run programming Snake – all it took to ignite my passion for ICT. Soon, my YouTube feed was filled with programming tutorials, and I couldn’t resist the challenge. I thought to myself, “I can do that too.” Since then, programming has become a central part of my life. I’m constantly seeking out more challenging coding assignments to push my skills to the limit. My journey with CodeGlass started during my studies at Windesheim, where I was required to complete a short internship. I had several options but chose CodeGlass because they offered the most challenging assignment. After that internship, I decided to stay at CodeGlass because it’s a place where I can work on demanding projects alongside others who share the same passion for programming. CodeGlass has provided me with the perfect environment to explore my love for coding and tackle some of the most exciting challenges in the tech world. I’m thrilled to be part of this dynamic team and look forward to even more adventurous coding experiences! Connect with me to chat about tech and programming anytime. Best regards, Joost Godschalk, CodeGlass Enthusiast 🚀
Meet COO Lynn
Meet Lynn, one of the driving forces and visionaries behind CodeGlass as our Chief Marketing Officer (COO)! Lynn’s Journey: Hello, I’m Lynn Weggemans, and I bring the world of business and a passion for excellence to CodeGlass. I began my career in the hospitality industry, where I learned the true meaning of “service with a smile.” It was there that I realized the immense power of teamwork. I firmly believe that collaboration is the key to success, even in the complex world of software. When I was first approached to join a startup, I hesitated. I questioned if the tech industry was the right fit for me. But after careful consideration, I made up my mind—I was in. I’ve always relished a challenge, and at this point in my career, I knew it was the perfect moment to embark on this exciting journey. I am a passionate woman who doesn’t see just one way to achieve a goal, but a multitude of paths to explore. I firmly believe that for every problem, there exists a solution, and it’s our collective responsibility to find it together. Success is not a solo endeavor; it’s a collaborative effort. At CodeGlass, I’m thrilled to combine my passion, experience, and vision to help shape the future of software development. Together, we will overcome challenges, explore opportunities, and innovate. I’m excited to be part of a team that values collaboration and understands that our collective strength is the driving force behind our success. Join me on this exciting journey of innovation and teamwork. Let’s create a future we can all be proud of! Best regards, Lynn Weggemans, CodeGlass Visionary 🚀
Meet CTO Terence
“Embrace the new week with innovation in your heart and endless possibilities in your sights. Terence Bremmer, our CTO at CodeGlass, is here to lead the way into a future of boundless software development possibilities. Let’s conquer this week together!” Meet Terence, our Chief Technology Officer (CTO)! Terence’s Journey: Hey there, I’m Terence Bremmer, and I’m here to take your software development experience to the next level as the CTO at CodeGlass! From a young age, I was fascinated by the endless possibilities of computers, both in hardware and software. I loved pushing the limits, experimenting with different configurations, and making the impossible happen. I wanted to be the one who could bridge the gaps between incompatible hardware and software, and that’s where my tech journey began. As my passion for computers grew, I realized that my future was in the world of technology. I wasn’t sure whether to dive into hardware, support, or software development, so I pursued an ICT course to explore my options. It didn’t take long for me to realize that my heart belonged to software engineering. I pursued a computer science course at university to become a software engineer, and it was during my graduation internship that I met Tyrone. We became fast friends, and years later, he asked me to join him in launching CodeGlass, the next generation of dev tools. I jumped at the opportunity, and I now lead the technical development as the CTO. I’m beyond excited to lead CodeGlass into a future filled with innovation and endless possibilities. Together, we’ll conquer new frontiers in software development! Get ready for an amazing journey ahead with CodeGlass! Cheers, Terence Bremmer, Developer and CTO of CodeGlass 🚀
CES Unveiled
🚀 Big News: We’re Heading to CES UNVEILED! 🚀 Hey everyone, our dream of being a part of something as incredible as CES is coming true, and the first stop is CES UNVEILED tomorrow in Zaandam. 🌟 Join us at CES UNVEILED in Zaandam, where the adventure begins. This is a dream come true for us, and we’re absolutely thrilled to showcase our groundbreaking development tool! For those in the tech industry, CES is where innovation shines the brightest, and we’re proud to be a part of it. 🤝 We’re opening our doors for an exclusive meet-and-greet. If you’re in the area, drop by, and let’s discuss the future of software development. We have some groundbreaking innovations to share! For all the details about CES UNVEILED, here’s the link: https://buff.ly/3LusijO . Stay tuned, as this is just the beginning of our journey at CES. We can’t wait to take you along for the ride!
