Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

If the lesson of xz was "reduce supply chain attack surface" then the freedesktop people clearly haven't received it yet.


Fedora has used PolKit for 12 years now, and the javascript rules have probably been a thing for about as long.


Doctors recommended cigarettes for decades. What should give everyone similar pause is xz was found unintentionally.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: