Re:Backdoor in upstream xz/liblzma leading to SSH server com...
by freedomben on Friday March 29, 2024 @03:09PM
(#39867805)
Well, it is much easier said than done. Philosophically I agree, but in the real world where you have later commits that might break and downstream projects, etc, it isn't very practical. It strikes me as in a similar vein to high school students and beauty pageant constestants calling for world peace. Really great goal, not super easy to implement.
I would definitely be looking at every single commit though and if it isn't obviously safe I'd be drilling in.
I would definitely be looking at every single commit though and if it isn't obviously safe I'd be drilling in.