News for hackers. Stuff that matters.

A comment on The xz-utils backdoor has been removed. Parent comment

Re:The xz-utils backdoor has been removed by throwiforgtnlzy on Wednesday April 10, 2024 @02:03AM (#39987426)
Maybe we need an international NGO/co-op to provide essential services for small, essential FOSS projects such as security comms, security audits, build infrastructure, testing, best practices, background investigations, and so forth.

The "one guy's little piece of code holding up the world" is a SPOF and much easier to attack than if they had some help and automation.

[ Parent | on HN ]
Re:The xz-utils backdoor has been removed by zoobab on Wednesday April 10, 2024 @02:59AM (#39987759)
"security comms, security audits, build infrastructure, testing, best practices, background investigations, and so forth."

Typical over-engineering that comes from large corporations.

They will turn FOSS into a walled garden, as if contributing to projects was not a pain already.

[ Parent | on HN ]
Re:The xz-utils backdoor has been removed by mschuster91 on Wednesday April 10, 2024 @07:46AM (#39989609)
> They will turn FOSS into a walled garden, as if contributing to projects was not a pain already.

The only thing in here that has potential negative impact are the background investigations, but it might be reasonable to have an independent third party that offers this as a service for project leads.

[ Parent | on HN ]