It was caught out of luck due to performance degradation. So nobody reads the co... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

hcks on March 30, 2024 | parent | context | favorite | on: Backdoor in upstream xz/liblzma leading to SSH ser...

It was caught out of luck due to performance degradation. So nobody reads the code - not even once- prior to merging into upstream supply chain?

hcks on March 30, 2024 [–]

https://x.com/bl4sty/status/1773780531143925959?s=20

So nobody reads releases notes either.

But I’m sure this was a one off and were safe now

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact