Zach Leatherman :11ty: on Nostr: My takeaway from the #xz backdoor is that I will now treat any and all “is this ...
My takeaway from the #xz backdoor is that I will now treat any and all “is this still being maintained”-esque messages in open source repositories with the hostility merited a nation-state supply-chain attack on open source as a concept.
Published at
2024-04-02 14:04:25Event JSON
{
"id": "1f855c7d9527427adf8a87f3d9da8e4a4e5cae2b40f85d5e1b9c31e63dda2b96",
"pubkey": "51b66b5d468ae19d4dee4ffe19ec520a829c415d50ed105666ba730310f6475b",
"created_at": 1712066665,
"kind": 1,
"tags": [
[
"t",
"xz"
],
[
"proxy",
"https://fediverse.zachleat.com/users/zachleat/statuses/112202000988099406",
"activitypub"
]
],
"content": "My takeaway from the #xz backdoor is that I will now treat any and all “is this still being maintained”-esque messages in open source repositories with the hostility merited a nation-state supply-chain attack on open source as a concept.",
"sig": "c50aa974cde98283fa8bdfb3e0ab9f97d55eeb94c79a9f009151041e323fc0d392499e6c691adafde9ae4e95e4f63eaf8d8cbd9187c13b6ec1a9d5e4701fa0fc"
}
