31–40 of 106 posts
@dang: Please add [2021] to the title.
Why? It is immediately obvious that the PR was published 3 years ago. Github shows the timestamp very clearly in multiple places.
GitHub "community" is just awful. There are people trying to get real work done in that thread, but then there are all these random bystanders piling up to throw in their comments which range from useless to actively harmful and distracting. And it's not an isolated case, this happens pretty much always when some issues attracts attention on GH. Can't we respect the project and give the people there space to work, an…
What are you sitting on, if not an arm chair? We all agree that the xz attack was of unparalleled sophistication and complexity, spread carefully over years, funded by a State. Many people were taken in so how is it helpful to pile on Jia Tan's primary victims?
I'm confused why this is being posted now? This thread appears to have taken place in the days immediately following the original XZ discovery, with no new activity since very early April. It was discussed heavily at the time that Jia Tan had made contributions to other projects and that those were being investigated as well. Is there something new here I missed, or some additional context that makes this specific co…
I've been reading "the man who solved the market" about Jim Simons and his hedge fund Renaissance. This reminds me that there was a period just after the fall of the Soviet Union where Renaissance was flooded with very technically strong, very motivated, very hard working, and very fraudulent ex-USSR people.
They're leaking guys, wake up.
Wild. All of these carefully inserted “seemingly innocuous” changes in the ecosystem to end up contributing to a wider exploit. This comment sums it up nicely with a gif: https://github.com/libarchive/libarchive/pull/1609#issuecomm...
This was discussed at the time of the libxz revelations and they did re-review all commits in light of this: https://github.com/libarchive/libarchive/issues/2103
it's not a major flaw, and no exploit. but it seems as if nobody paid due attention to actual changes.
People in the Western world are comfortable and people in China are very motivated. I've been reading "the man who solved the market" about Jim Simons and his hedge fund Renaissance. This reminds me that there was a period just after the fall of the Soviet Union where Renaissance was flooded with very technically strong, very motivated, very hard working, and very fraudulent ex-USSR people. They're leaking guys, wake…
People in the Western world are comfortable and people in China are very motivated. I've been reading "the man who solved the market" about Jim Simons and his hedge fund Renaissance. This reminds me that there was a period just after the fall of the Soviet Union where Renaissance was flooded with very technically strong, very motivated, very hard working, and very fraudulent ex-USSR people. They're leaking guys, wake…
I'd be surprised if China has anything to do with this operation.