4 ms·
To be fair, xz didn't hit, xz flopped. The issue was detected before it could do much/any damage. As far as I'm concerned it's a point in favor of OSS, rather
by etiennebausson 3y ago
To be fair, xz didn't hit, xz flopped. The issue was detected before it could do much/any damage.
As far as I'm concerned it's a point in favor of OSS, rather than against it.
How many such attacks in closed-source programs goes undetected?
- tietjens 3y agoMy point was regarding German appetite for risk. Not trying to make a point against OSS.