Conversation

Notices

1. Embed this notice
   Piggo :verified_horse: (piggo@piggo.space)'s status on Tuesday, 02-Apr-2024 06:42:24 JST Piggo :verified_horse:
   imo the xz project is just gone. nobody will trust it going forward, a rollback two years or so isn't really feasible
   • Embed this notice
     Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Tuesday, 02-Apr-2024 06:42:23 JST Haelwenn /элвэн/ :triskell:

     in reply to
     @piggo Well gentoo rolled the package back before Jia Tan, so that's doable.
     And even without github yeeting it so tukaani forced to self-host it would have been a mess of having to audit all the commits.
   • Embed this notice
     Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Tuesday, 02-Apr-2024 07:05:07 JST Haelwenn /элвэн/ :triskell:

     in reply to

     • shironeko
     @shironeko @piggo And end up with a shitton of binaries in the "source" tarball / dependencies.
   • Embed this notice
     shironeko (shironeko@fedi.tesaguri.club)'s status on Tuesday, 02-Apr-2024 07:05:08 JST shironeko

     in reply to

     • Haelwenn /элвэн/ :triskell:
     @piggo @lanodan just rewrite it in rust :blobcatgooglyshrug:
   • Embed this notice
     Piggo :verified_horse: (piggo@piggo.space)'s status on Tuesday, 02-Apr-2024 07:05:09 JST Piggo :verified_horse:

     in reply to

     • Haelwenn /элвэн/ :triskell:
     @lanodan from my reading the bigger problem is software that depends on symbols added in the newer versions. Just downgrading the package is easy money of course