News for hackers. Stuff that matters.

A comment on Backdoor in upstream xz/liblzma leading to SSH server compromise. Parent comment

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by solarengineer on Saturday March 30, 2024 @01:24AM (#39872078)
I can think of two approaches for such companies:

a. Use commercial OS vendors who will push out fixes.

b. Set up a Continuous Integration process where everything is open source and is built from the ground up, with some reliance on open source platforms such as distros.

One needs different types of competence and IT Operational readiness in each approach.

[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by squeaky-clean on Saturday March 30, 2024 @03:21AM (#39872608)
> b. Set up a Continuous Integration process where everything is open source and is built from the ground up, with some reliance on open source platforms such as distros.

How would that have prevented this backdoor?

[ Parent | on HN ]