undefined | Better HN

0 pointsHamuko1y ago0 comments

Didn't the xz situation kinda prove that even reading the script is probably not gonna do you a lot of good if you're up against someone smart?

0 comments

Exactly, also if you already go thinking in adversarial terms when using something, why would you even use the thing to begin with?

Maybe I'm too naïve.

> given the xz situation a well crafted shell script can seem harmless while being very dangerous

That’s exactly what they are saying.

The xz situation proved the opposite: if you're up against someone smart, you won't read the script (and you'll think you have).

The xz situation proved that while you didn't read the script, someone did detect the problem. It shows the benefit of many-eyes.

j / k navigate · click thread line to collapse

Exactly, also if you already go thinking in adversarial terms when using something, why would you even use the thing to begin with?

Maybe I'm too naïve.

> given the xz situation a well crafted shell script can seem harmless while being very dangerous

That’s exactly what they are saying.

The xz situation proved the opposite: if you're up against someone smart, you won't read the script (and you'll think you have).

The xz situation proved that while you didn't read the script, someone did detect the problem. It shows the benefit of many-eyes.

j / k navigate · click thread line to collapse