> As always theory and reality are different Thank you very much for citing that! along with highlighting the fact that the exploit was in fact, not detected b

> As always theory and reality are different Thank you very much for citing that! along with highlighting the fact that the exploit was in fact, not detected by reproducible builds prior to other means of discovery. In recent times, actual reality is often maligned when compared to how people feel about objective reality and how it meshes with their individual value systems. I have personal values too, but I don't hold the opinion that actual reality is less significant than how I feel about it. It's not a popular perspective 8-/ I've always liked to say: The difference between theory and reality is that, in theory they're the same, and in reality they're not. I hope the realization that the reproducible builds of NixOS _could_ have detected the xz exploit, but didn't, will lead to new advances in the analysis of those reproducible builds to detect other exploits sooner in the future.