Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
jarfil
on March 30, 2024
|
parent
|
context
|
favorite
| on:
Backdoor in upstream xz/liblzma leading to SSH ser...
Archiving the repo doesn't stop the downloads. They would need to rename it in order to prevent distro CI/CD from keeping downloading untrustworthy stuff.
account42
on April 2, 2024
[–]
Distros downloading directly from GitHub deserve what they get.
Consider applying for YC's Summer 2026 batch! Applications are open till May 4
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
