XZ backdoor in a nutshelllemmy.zipimagecross-posted to: linux@lemmy.eco.br Possibly linux ( @possiblylinux127@lemmy.zip ) Linux@lemmy.mlEnglish • 7 months ago message-square59fedilinkarrow-up1707
arrow-up1707imageXZ backdoor in a nutshelllemmy.zip Possibly linux ( @possiblylinux127@lemmy.zip ) Linux@lemmy.mlEnglish • 7 months ago message-square59fedilinkcross-posted to: linux@lemmy.eco.br
minus-square Possibly linux ( @possiblylinux127@lemmy.zip ) OPlinkfedilinkEnglish4•7 months agoThat would do nothing for liblzma as it was trusted.
minus-square EmperorHenry ( @EmperorHenry@discuss.tchncs.de ) linkfedilink1•7 months agowho was it trusted by? There’s whitelisting applications that indiscriminately block everything that isn’t already installed too.
minus-square Possibly linux ( @possiblylinux127@lemmy.zip ) OPlinkfedilinkEnglish4•edit-27 months agoThe developer of XZ. What your describing is package verification which already happens
That would do nothing for liblzma as it was trusted.
who was it trusted by? There’s whitelisting applications that indiscriminately block everything that isn’t already installed too.
The developer of XZ. What your describing is package verification which already happens