Slacker News Slacker News logo featuring a lazy sloth with a folded newspaper hat
  • top
  • new
  • show
  • ask
  • jobs
Library
← Back to context

Comment by pdw

3 months ago

Right, people forget that the xz-utils backdoor happened to a very traditional no-dependencies C project.

1 comment

pdw

Reply

theteapot  3 months ago

xz-utils has a ton of build dependencies. The backdoor implant exploited a flaw in an m4 macro build dep.

Slacker News

Product

  • API Reference
  • Hacker News RSS
  • Source on GitHub

Community

  • Support Ukraine
  • Equal Justice Initiative
  • GiveWell Charities