Skip to main content


The XZ Linux Backdoor Is Incredibly BAD!! #Linux #YouTube https://youtu.be/OHAyf0qwdCs
in reply to Brodie Robertson

I'm honestly surprised at how many distributions build off a tarball instead of the actual source code, especially given how one of the main benefits of using distro repos is that the distro supposedly audits the code.

I mean I guess they probably do review the code itself but what's the point if they don't build off the code they're reviewing and instead use a tarball someone else built

in reply to Brodie Robertson

guess we have a winner of the 2024 Underhanded C Contest :blobcatfingergun: 😂
in reply to Brodie Robertson

I think "fixing their own backdoors" is the way how we get more development on Linux Software!

Change my mind.

in reply to Brodie Robertson

Why starting with the loud clickbait and then saying the actual, useful info at minute 3? Unnecesary FUD.
This entry was edited (1 month ago)
in reply to Brodie Robertson

Cool, I'll improve in a language that is not my native tongue. Appreciate the suggestion, honestly, no sarcasm involved.

But of course that's the main point in my message, right?

This entry was edited (1 month ago)
in reply to Brodie Robertson

Long version: Look, I find you knowledgable and I enjoy reading you most of the time. Cool.
Also, I lived through the whole SCO thing and I KNOW how the term came to be something.

So, if you'd rather have me not using FUD outside of a very specific context, ok! But I've been reading about this xz thing because my work needs me to, and I find it unnecessary to have a board saying UPDATE NOW when most distros are not using the backdoored library other than rolling releases.

in reply to Brodie Robertson

I wonder if there is a Snap store connection on this one 😂

Lo, thar be cookies on this site to keep track of your login. By clicking 'okay', you are CONSENTING to this.