OpenSSH and XZ/liblzma: A nation-state attack was thwarted, what did we learn?

Security advice from Docker? Hypocrisy

Well it is April Fools; it's nice to see some companies still have a sense of humour.

> what did we learn

Minimise attack surfaces at all costs. For every thwarted attack there are likely other successful ones

> A nation-state [..]

Source?

Good tidbit in there that systemd was about to ship an optimization that rendered their payload non-functional:

This might be why they started rushing their backdoored release, even though it was not perfect yet.

Isn't that rust thing just a binding to the C library?