News for hackers. Stuff that matters.
Re:The xz sshd backdoor rabbithole goes quite a bit deeper by almostnormal on Sunday April 07, 2024 @04:24AM (#39959232)
Maybe something could be built to put more eyeballs on things.

A kind of online-tool that collects the sources to build some relevant distributions, a web front-end to show a random piece of code (filtered by language, probability to show inreasing by less-recently/frequently/qualified viewed) to a volunteering visitor to review. The reviewer leaves a self assesment about their own skills (feed back into selection probability) and any potential findings. Tool-staff double-checks findings (so that the tool does not create too much noise) and forwards to the original authors (bugs) or elsewhere (backdoors).

A bit like wikipedias show random page.

There are no comments on this comment yet.