A backdoor in xz [LWN.net]

A backdoor in xz

Posted Mar 30, 2024 6:07 UTC (Sat) by ssmith32 (subscriber, #72404)
In reply to: A backdoor in xz by marcH
Parent article: A backdoor in xz

There's being a messenger, and then there's wasting maintainer time trying to get a paper written about something everyone knows is a problem[1] by failing to get malicious code past them. Which, of course, just contributes to the overall problem of overworked maintainers that is the real root cause of the issue being covered above [2].

So, yeah excluding people from the community that are more interested in their own academic careers rather than genuinely helping - that's not "shooting the messenger".

[1]https://m.youtube.com/watch?v=fu8ZNRDQsi8&t=6771s
[2]https://www.mail-archive.com/xz-devel@tukaani.org/msg0057...

to post comments

A backdoor in xz

Posted Mar 30, 2024 14:37 UTC (Sat) by marcH (subscriber, #57642) [Link] (1 responses)

There's nothing wrong with excluding the offenders. There's everything wrong about whining and talking so much about them while saying so little about the actual issue.

A backdoor in xz

Posted Mar 30, 2024 14:41 UTC (Sat) by marcH (subscriber, #57642) [Link]

... and yes, maintainers are exhausted but no, that's not the only explanation.