Skip to main content


If you're a #Linux user, beware of the XZ backdoor:

https://youtu.be/OHAyf0qwdCs

Anders Rytter Hansen reshared this.

in reply to Anders Rytter Hansen

Yes, the main thing is that it was discovered!

Still, it's funny that it came from a Microsoft developer obsessed with benchmarks. ... 🤔

in reply to Anders Rytter Hansen

Andres Freund is a postgresql developer who works at Microsoft.
in reply to david Marec

@david Marec
Does he do open source development in his free time or is he paid by Microsoft to do it?
in reply to Anders Rytter Hansen

True, but if it hadn't been discovered, it would have ended up in the next stable release ... so ...
in reply to Anders Rytter Hansen

But it has been discovered. Supply chain attacks are more a thing of rolling releases.
in reply to Anders Rytter Hansen

Debian is pretty conservative. They always choose stability and proven versions before new features.
⇧