Live data from Hacker News

The xz-utils backdoor has been removed

github.com

21–23 of 23 posts

Re: The xz-utils backdoor has been removed

#21
post #16

Earlier quoted context omitted.

Who would do that? The project lacking active contributors is what enabled Jai Tan to get away with it in the first place.

Can’t we migrate to other libraries?

None of these suggestions actually cover the part where someone or someones do a bunch of bloody work.

Again, this is the problem in the first place.

Re: The xz-utils backdoor has been removed

#22
post #16

Earlier quoted context omitted.

Can’t we migrate to other libraries?

At least in Debian there's already the inevitable discussion about a supposed opportunity for "finally" moving to zstd. Which to me, frankly, feels a bit like getting out of the frying pan and into the fire, or what I think Arch ( yuck ) did years ago. That's not because I'm so much into xz. It's kind of funny there's a possible Debian connection, of all things, considering that quite a lot authorities and services i…

Where is this discussion happening?

Re: The xz-utils backdoor has been removed

#23
post #16

Earlier quoted context omitted.

Who would do that? The project lacking active contributors is what enabled Jai Tan to get away with it in the first place.

Can’t we migrate to other libraries?

There is a reimplementation of xz here at least https://github.com/gendx/lzma-rs
Post reply on HN