4 ms·
merely keeping build and test environments isolated would have entirely prevented this attack. better hygeine that way would also simplify both environments, s
by markhahn 3y ago
merely keeping build and test environments isolated would have entirely prevented this attack.
better hygeine that way would also simplify both environments, since the tools for each are fairly different.
- bonzini 3y agoHow are they different? Both use make and the C compiler. xz is not different in this respect from any other C, C++, Go or Rust program.