• corsicanguppy@lemmy.ca
    link
    fedilink
    arrow-up
    0
    ·
    6 months ago

    Wrong. The XZ backdoor highlights the value of enterprise-style releases vs the supply-chain exploits attacking the source stream. Backporting fixes is hard; but the diffs are smaller and this kind of trojan stands out.