Comment by fcanesin
3 years ago
Geez, his last commit is making security reports worse: https://git.tukaani.org/?p=xz.git;a=commitdiff;h=af071ef7702...
3 years ago
Geez, his last commit is making security reports worse: https://git.tukaani.org/?p=xz.git;a=commitdiff;h=af071ef7702...
Why is that accepted? Serious question
Presumably because they're one of the two maintainers: https://web.archive.org/web/20240329182607/https://xz.tukaan...
He had unfettered access to xz’s git?
Isn’t it a bit ironic with how much code everyone depends on that can freely be altered by some unknown party, while so much time goes into code reviews to verify internal changes at most companies.
17 replies →
Only on Github. Not on the Tukaani mirror.
Because nobody’s really paying attention.
“LGTM!”
Generally yes, but ripping all conditions out of SECURITY.md should at least raise an eyebrow?
6 replies →