undefined | Better HN

0 pointsHamuko2y ago0 comments

Didn't the xz situation kinda prove that even reading the script is probably not gonna do you a lot of good if you're up against someone smart?

0 comments

4 comments · 3 top-level

wizzwizz42y ago· 1 in thread

The xz situation proved the opposite: if you're up against someone smart, you won't read the script (and you'll think you have).

The xz situation proved that while you didn't read the script, someone did detect the problem. It shows the benefit of many-eyes.

Exactly, also if you already go thinking in adversarial terms when using something, why would you even use the thing to begin with?

Maybe I'm too naïve.

> given the xz situation a well crafted shell script can seem harmless while being very dangerous

That’s exactly what they are saying.

j / k navigate · click thread line to collapse