

Someone almost managed to inject a vulnerability into the source code for sshd.
You’re probably thinking of the Jia Tan attack on xz; because of a distro patch in Debian, code in xz had the ability to affect sshd. The changes weren’t actually to the sshd source, but trying to use an obscure route to affect sshd.












Depends on your definition of “early days”.
If you go to the 1990s, when it really started to enter public awareness:
IPv6 wasn’t a thing.
HTTP wasn’t as dominant a protocol as it is today. Use of FTP, telnet, gopher, NNTP, IRC, and so forth were more-common relative to the Web compared to today.
A lot of protocols weren’t encrypted.
If you were accessing the Internet via a dial-up modem (which was probably what you were doing in the 1990s if you were coming from home), you could download maybe 7 kB per second. You had maybe 100 milliseconds of latency — quite substantial compared to most modern network connections — on the first hop. This had a real impact on, say, real-time multiplayer video games.
Email spam was an increasing problem.
Personal computers were considerably more costly in real terms than they are today. Additionally, computer speed doubled about every 18 months, which meant that computers became obsolete very quickly. Tended to be wealthier people using it relative to today.
A higher proportion of technical or academic people due to universities and technical companies being connected.
Internationalization wasn’t great. Today, one can just generally use Unicode and write whatever language one wants wherever. Seeing Web pages displayed using the wrong text encoding wasn’t that uncommon. No emojis, either.
On the Web, lots of small, independent sites. If you want to look at some of them, the Wayback Machine at Archive.org is handy. Animated GIFs and patterened backgrounds weren’t uncommon.
Universities were more prominent as places to obtain free software or the like.
In the late '90s, for the Web, it wasn’t quite worked out how people would actually use the thing. One school of thought is that people would adopt “portal sites” that they’d always go to when opening their Web browser. In practice, this didn’t really turn out to be what happened, but trying to win “portal marketshare”
The '90s had computers that couldn’t display 24-bit color. Computers displaying 8-bit color chose a “palette” of colors, and could only show that many at one time. If you had an image on a Web page that contained a color that wasn’t on that palette, a “close” color was used. Eventually, the world converged on 216 “safe” colors that one could expect a computer to display, so many images didn’t contain all that many colors. Photographic images were often dithered.
Due in part to bandwidth limitations as well as computational limitations, video over the network was more of a novelty than a practical thing. No YouTube or equivalent. RealPlayer, a browser plugin, was one of the more-prominent ways to stream video.
Major personal computer OSes — MacOS and Windows 9X — were quite unstable compared to where personal computer OSes were in maybe the mid-2000s on. Web browsers were also quite unstable. Crashes were a thing.
Much higher expectations for data privacy. I remember when it was considered outright scandalous for software to “phone home” to just indicate, say, a version number. Today, vast amounts of software are harvesting all kinds of data, and there is software whose entire business model is based on doing so.
Search engines were a lot worse. Google today uses some kind of heuristics to rapidly index things like major news sites. Getting outdated links or limited coverage of the Web was a lot more common (though we didn’t have to worry about the current glut of AI-generated spam Websites).
Many top-level-domains have come into use. One saw far fewer in the 1990s. I’d say mostly .com, .net, and .org, plus the country codes.
Consumer broadband routers with built-in, enabled firewalls weren’t really much of a thing. It was far more common to be able to talk to arbitrary machines. A lot more stuff is firewalled off today.
Probably not something that the typical person would have noticed, but lots of institutions ran public SNMP on routers and made it accessible to the Internet at large. I remember mapping out entire networks for many different organizations. You could sit there, watch the traffic flow, see the size of all the network links, etc. Places started to tamp down on that, saw exposing that information as being a security risk.
In the US, some users accessed the Internet via gatewayed access from commercial dial-up services that were essentially giant BBSes, places like Compuserve or American Online. These had originally been aimed more at being stand-alone services and essentially died out as people just became interested in Internet access.
Some large technology-oriented companies and institutions controlled huge amounts of the IPv4 address space. Apple still has a Class A network (about 1/256ths of the IPv4 Internet’s addresses). Ford still does as well. But MIT and Stanford used to have their own as well.
Websites where one went to interact with other users, like forums, were around, but early, and far fewer people were using them.
Java was originally intended to be used in Web browsers in applets, something along the way that Javascript is today. It didn’t succeed.
It wasn’t yet clear in the late 1990s that Microsoft wouldn’t “take over” the Web by providing a dominant Web browser and managing to institutionalize use of proprietary Microsoft technologies like ActiveX.