News for hackers. Stuff that matters.

A comment on Debian on xz-utils: revert to version that does not contain changes by bad actor. Parent comment

Re:Debian on xz-utils: revert to version that does not conta... by jdiez17 on Saturday March 30, 2024 @09:21AM (#39874610)
I'm sure you had the choice not to provide that documentation, right?
[ Parent | on HN ]
Re:Debian on xz-utils: revert to version that does not conta... by darnir on Saturday March 30, 2024 @10:52AM (#39875438)
Well, yes. And I chose to exercise that right.

The point of the anecdote is to supplement the parent poster by stating that their hypothetical scenarios are already happening.

We should have better testing and more eyes on incoming code for projects we depend on. But my point I guess is that vetting maintainers is not an option.

[ Parent | on HN ]