Conversation

Notices

1. Embed this notice
   Peter N. M. Hansteen (pitrh@mastodon.social)'s status on Sunday, 31-Mar-2024 05:50:18 JST Peter N. M. Hansteen

   This is one of the best explanations of the xz matter I have seen so far:
   https://lcamtuf.substack.com/p/technologist-vs-spy-the-xz-backdoor

   and it leads in with a quote to remember -

   "This dependency existed not because of a deliberate design decisionby the developers of OpenSSH, but because of a kludge added by some Linux distributions to integrate the tool with the operating system’s newfangled orchestration service, systemd."

   Enjoy!

   #xz #opensource #security #openssh

   • Haelwenn /элвэн/ :triskell: likes this.
   • Embed this notice
     Jona Joachim (jaj@mastodon.social)'s status on Monday, 01-Apr-2024 07:08:36 JST Jona Joachim

     in reply to

     • Eckes :mastodon:

     @eckes
     systemd caused so much pain, there is nothing wrong with blaming it every time we can
     @pitrh

     Haelwenn /элвэн/ :triskell: likes this.
   • Embed this notice
     Eckes :mastodon: (eckes@zusammenkunft.net)'s status on Monday, 01-Apr-2024 07:08:37 JST Eckes :mastodon:

     in reply to

     @pitrh you can’t blame everything on systemd