2 ms·
No they're the same. Why do you think xz was targeted? It's a giant slippery hairball.
by jart 1y ago
No they're the same. Why do you think xz was targeted? It's a giant slippery hairball.
- Delk 1y ago> Why do you think xz was targeted? Possibly for any number of reasons. A sole maintainer with a bit too little capacity to keep up the development. A central role as a dependency for crucial packages in a couple of key distros. What would be the connection between the backdoor (or indeed any supply chain security) and any design details of the xz file format? How would the backdoor have been avoided if the archive format were different?
- deleted 1y ago[deleted]