Half a Second
The Backdoor That Almost Broke the Internet, and the Invisible Labor Beneath It
On March 29, 2024, a Microsoft engineer running a routine benchmark at home noticed that logging into a test machine was taking about half a second longer than it should. Almost anyone would have written it off as noise. He chased it instead — and found a backdoor hidden inside XZ Utils, a small compression tool that sits unnoticed on nearly every Linux system on Earth. Someone had spent two years putting it there.
Half a Second tells that story as one continuous narrative: the burned-out volunteer who maintained the code alone and was patiently, expertly manipulated into giving it up; the engineer whose half-second of curiosity caught the attack through a chain of luck and hard-won instinct; and the operator who built it, who has never been identified and, this book argues, may never be.
The catch is where the book begins, not what it is about. Underneath the story is a quieter, structural fact. Much of the world's digital infrastructure is in fact well supported — large companies pay the engineers who write most of the Linux kernel. But the same economy that funds the big, visible pieces leaves many of the small, unglamorous ones that everything also depends on to a handful of volunteers, often unpaid and overstretched. XZ Utils, maintained for years by a single exhausted person, was exactly that kind of piece, and the incident is the moment that imbalance briefly came into view.
This is interpretive narrative nonfiction, written for the general reader. It assumes no technical background: everything it needs is explained in plain language, in the order the story reaches it.
Four parts
I · The Discovery
The half-second anomaly and the investigation it set off: Andres Freund following the clues in real time, the forty-eight-hour scramble that followed his disclosure, and a plain-language reckoning with what the backdoor would have done at scale.
II · The Long Setup
The human story beneath the attack: a lone, exhausted maintainer; a patient operator cultivating trust over years; the coordinated sock-puppet pressure campaign; the handover of signing keys and upload rights nobody audits; and the payload itself.
III · The Foundation
How Linux became the substrate of the digital economy, and what the open-source commons actually is in 2026 — a few thousand overworked maintainers holding up trillions of dollars of activity, and what today's foundations can and cannot fix.
IV · The Aftermath
The still-open hunt for an operator who has never been identified, trust understood as infrastructure, and the invisible labor that quietly holds the whole thing up.
Available now. The complete book is free to read online and to download as a PDF, licensed under CC BY-NC-ND 4.0. If it's useful to you, consider giving back to the maintainers it's about by donating to the Open Source Collective.