News for hackers. Stuff that matters.
Re:The xz-utils backdoor has been removed by icameron on Wednesday April 10, 2024 @05:40AM (#39988772)
Who would do that? The project lacking active contributors is what enabled Jai Tan to get away with it in the first place.
Re:The xz-utils backdoor has been removed by Affric on Wednesday April 10, 2024 @07:11AM (#39989360)
Can’t we migrate to other libraries?
Re:The xz-utils backdoor has been removed by eigenlicht on Wednesday April 10, 2024 @07:40AM (#39989559)
At least in Debian there's already the inevitable discussion about a supposed opportunity for "finally" moving to zstd. Which to me, frankly, feels a bit like getting out of the frying pan and into the fire, or what I think Arch (yuck) did years ago. That's not because I'm so much into xz. It's kind of funny there's a possible Debian connection, of all things, considering that quite a lot authorities and services in areas like China, Russia or Iran are recently migrating, for obvious reasons, from Windows/Mac to more or less home-made (~styled) Linux distributions, that just often happen to be based on Debian. I don't think this is too popular in English speaking countries in particular, but then I really didn't want to chime in on the speculations. ;P
Re:The xz-utils backdoor has been removed by jwilk on Wednesday April 10, 2024 @08:28AM (#39989934)
Where is this discussion happening?
Re:The xz-utils backdoor has been removed by cqqxo4zV46cp on Wednesday April 10, 2024 @08:25AM (#39989922)
None of these suggestions actually cover the part where someone or someones do a bunch of bloody work.

Again, this is the problem in the first place.

Re:The xz-utils backdoor has been removed by nextaccountic on Thursday April 11, 2024 @01:25AM (#39998660)
There is a reimplementation of xz here at least https://github.com/gendx/lzma-rs