@pmidden @jacqueline they discovered that xz had a backdoor because it took 0.4 seconds longer to log into ssh