Ask HN: What was the story of the attempted addition of a backdoor in WebKit?
I finally began reading Ross Anderson&#x27;s Security Engineering book and came across a passage which notes that in 2012, Anderson heard that a volunteer working on WebKit was caught deliberately contributing vulnerable code which could later be sold to an exploit vendor.<p>I have found next to nothing about this online. Only Ross&#x27; testimony in a US court case:  https:&#x2F;&#x2F;committees.parliament.uk&#x2F;writtenevidence&#x2F;61727&#x2F;html&#x2F;<p><pre><code>  For example, I learned in 2012 that a volunteer to the Webkit free software project, which develops and maintains graphics software for use in browsers, had been discovered trying to sneak a vulnerability into the software, with a view to selling it later.
</code></pre>
Does anybody else know further details of this? Given the recent xz&#x2F;openssh backdoor attempt, I would be interested hearing what happened here.