4 ms·
I pointed out this weakness the other day on the internet. I got attacked by open source software armies.
by metalspoon 2y ago
I pointed out this weakness the other day on the internet. I got attacked by open source software armies.
- trust_bt_verify 2y agoThanks for sharing.
- ranger_danger 2y agoFOSS zealots are not always security experts.
- ratg13 2y agoMaybe it was because you weren't pointing out anything new? There was a pull request to stop linking liblzma into libsystemd a month before the backdoor was found https://github.com/systemd/systemd/pull/31550 https://github.com/systemd/systemd/pull/31550 This was likely one of many things that pushed the attackers to work faster, and forced them into making mistakes.
- metalspoon 2y agoNo. They couldn't get along with the idea that some open source software packages should also sometimes be cut away, just like all other packages. They felt threatened by the idea that open source maintenance can ever go wrong and started attacking me. They argued closed source was worse. That was not my point at all. I was not raising a weakness of open source. I was just pointing out that linking to libsystemd had that kind of problem.
- flohofwoe 2y agoPlease don't throw despicable systemd zealots and honorable open source zealots into the same bucket ;)
- ikekkdcjkfke 2y agoPlot twist: systemd zealots were all sockpuppets
- baobun 2y agoPlease don't bring group-identity politics here.