Backdoor in upstream xz/liblzma leading to SSH server compromise

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by salawat on Friday March 29, 2024 @03:32PM (#39868076)

I mean, autoconf is basically a set of template programs for snffing out whether a system has X symbol available to the linker. Any replacement for it would end up morphing into it over time.

Some things are just that complex.

[ Parent | on HN ]

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by acdha on Friday March 29, 2024 @06:18PM (#39869600)

We have much better tools now and much simpler support matrices, though. When this stuff was created, you had more processor architectures, compilers, operating systems, etc. and they were all much worse in terms of features and compatibility. Any C codebase in the 90s was half #ifdef blocks with comments like “DGUX lies about supporting X” or “SCO implemented Y but without option Z so we use Q instead”.

[ Parent | on HN ]

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by salawat on Sunday March 31, 2024 @01:16PM (#39886046)

That's the essence of programming in C though...

You figure out what the hardware designers actually did, and get the program written to accommodate it.

[ Parent | on HN ]