News for hackers. Stuff that matters.

A comment on Backdoor in upstream xz/liblzma leading to SSH server compromise. Parent comment

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by johnisgood on Saturday March 30, 2024 @09:06AM (#39874503)
On https://www.mail-archive.com/[email protected]/msg00567.h..., Lasse Collin mentions long-term mental health issues among other things.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by beanjuiceII on Saturday March 30, 2024 @10:31AM (#39875243)
would be nice if he'd come out with some statements considering he's still committing to xz as of few hours ago

https://git.tukaani.org/?p=xz.git;a=commit;h=f9cf4c05edd14de...

[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by LigmaBaulls on Saturday March 30, 2024 @10:49AM (#39875412)
You mean a statement like this https://tukaani.org/xz-backdoor/
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by doug_durham on Saturday March 30, 2024 @01:06PM (#39876571)
It makes me wonder. Is it possible to develop a robust Open Source ecosystem without destroying the mental health of the contributors? Reading his posting really made me feel for him. There are exceedingly few people who are willing do dedicate themselves to developing critical system in the first place. Now there is the burden of extensively vetting every volunteer contributor who helps out. This does not seem sustainable. Perhaps users of open source need to contribute more resources/money to the software that makes their products possible.
[ Parent | on HN ]