you are viewing a single comment's thread
view the rest of the comments
[–] 10 points 2 years ago (5 children)

xz attack was an open source attack and it would be silly to assume that it was unique.

  • source
  • parent
  • hideshow 5 child comments
  • [–] -1 points 2 years ago (4 children)

    This has nothing to do with xz

  • source
  • parent
  • hideshow 4 child comments
  • [–] 10 points 2 years ago (3 children)

    I don't think you understood their point.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 2 years ago (2 children)
  • [–] 1 point 2 years ago (1 child)

    In response to:

    Moreover, the claim that they can harm the software is unwarranted because it is OPEN and many eyes are on it.

    The xz attack was an intentional backdoor put into a project that was "OPEN and many eyes are on it." Also, it was discovered due to the way it was executing and not because someone found it in the source. The original assumption has been proven wrong.

  • source
  • parent
  • hideshow 1 child comment