Live data from Hacker News

NixOS and reproducible builds could have detected the xz backdoor

luj.fr

191–192 of 192 posts

Re: NixOS and reproducible builds could have detected the xz backdoor

#192

Earlier quoted context omitted.

mechanism, or it didn't happen. and if any OS, then for windoze please!

if ( file_checksum == xz_backdoor ) { red_alert(); } There. Of course this doesn't buy you anything if the exploit is changed to target a "patched" OS but the same goes for the proposed Nix solution.

how is that automatic if you need the checksum of the backdoor?!

automatic here means that code written prior to the existence/knowledge of the xz backdoor catches not only this specific attack, but the entire class of such tarball attacks.

Post reply on HN