xz backdoor and autotools insanity
felipec.wordpress.com
I argue autotools’ convoluted nature is what enabled the xz backdoor in the first place. The truth is nobody needs to use autotools, and I show why.
  • Corngood@lemmy.ml
    0·
    1 year ago

    If you stop shipping autotools generated artefacts in your tarballs, things will be a lot simpler.

    Weirdly enough the malicious code does look eerily similar to the benign code, because both are unnecessarily obfuscated.

    This is not a human written or readable file you’re talking about. It’s a generated script.