3 ms·
Oxide and Friends Podcast – Discovering the XZ Backdoor with Andres Freund [video]
- throwiforgtnlzy 3y agoFor the security of all and analogous to the Chaos Monkey principle, there ought to be a covert merry band of coders whose goal is to try to slip obsfucated benign commits into important FOSS projects under pseudonyms to maintain vigilance and offer teachable moments as a public service.
- klysm 3y agoSo like bug bounties but a but more adversarial?
- ironbound 3y agoUniversity of Minnesota researchers tried this and got banned! [0] https://www.theverge.com/2021/4/30/22410164/linux-kernel-university-of-minnesota-banned-open-source https://www.theverge.com/2021/4/30/22410164/linux-kernel-uni...
- gary_0 3y agoThat's a bit like trying to sneak guns past the TSA without clearing your "security testing" with the higher-ups beforehand. Believe it or not, straight to jail.
- xorvoid 3y agoExcellent interview. Great contrast to the NYT article they start talking about. Evidence that we really need more tech experts that get into journalism and have the capability to conduct quality interviews. Bryan Cantrill is a good interviewer and asks good questions.
- ChrisArchitect 3y agoRelated post: https://oxide.computer/podcasts/oxide-and-friends/1843393 https://oxide.computer/podcasts/oxide-and-friends/1843393