News for hackers. Stuff that matters.

A comment on Backdoor in upstream xz/liblzma leading to SSH server compromise. Parent comment

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by zeroCalories on Friday March 29, 2024 @05:04PM (#39868994)
"Constant improvement" sounds like "constantly playing catch-up". Besides that, someone with TS can be arrested and charged, and I don't want amateur contributors.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by msm_ on Friday March 29, 2024 @07:37PM (#39870238)
>and I don't want amateur contributors.

And you're free to not accept amateur contributions to the OS projects you maintain. Hell, you can require security clearance for your contributors right now, if you want.

[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by zeroCalories on Friday March 29, 2024 @08:53PM (#39870739)
Software like that already exists. I'm saying open source should do better.
[ Parent | on HN ]