Archiving the repo doesn't stop the downloads. They would need to rename it in o... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

jarfil on March 30, 2024 | parent | context | favorite | on: Backdoor in upstream xz/liblzma leading to SSH ser...

Archiving the repo doesn't stop the downloads. They would need to rename it in order to prevent distro CI/CD from keeping downloading untrustworthy stuff.

account42 on April 2, 2024 [–]

Distros downloading directly from GitHub deserve what they get.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact