Re:Reflections on Distrusting xz
by moritonal on Wednesday April 03, 2024 @07:00AM
(#39915834)
The irony is that this would make a oddly effective way of having paid open source devs who for the most part just honestly improve projects. With the massive downside they undermine it at a critical moment.
[ Parent
| on HN ]
Ye then maybe thanks to them finally we'll have The year of the air gapped Linux desktop.
I dunno what to do if e.g. Debian gets compromized, as in, I can't trust the collective of maintainers.
I assume any Windows machine is backdoored. Trivially proven by forced auto updates.
Maybe air gapping some home computer for sensitive data might be a good idea.
The ideal situation is having multiple intelligence agencies all working on one project and spotting each others' backdoors, so at the end of the day we just have a really secure and well-maintained project.