2 ms·
I can understand the thrust of this, but the problem in xz backdoor was not a product of move fast and break things.. it was a product of the implied web of tru
by consumer451 3y ago
I can understand the thrust of this, but the problem in xz backdoor was not a product of move fast and break things.. it was a product of the implied web of trust in OSS, wasn't it?
https://xkcd.com/2347/ https://xkcd.com/2347/
https://news.ycombinator.com/item?id=39874942 https://news.ycombinator.com/item?id=39874942
- humanrebar 3y agoThe argument is that various steps in the backdoor relied on hacks and tech debt in autotools that are taken as arcane but normal, like detecting whether certain dependencies exist by trying to compile snippets of code. Instead of, you know, just having build systems, dependency management, and such.
- deleted 3y ago[deleted]