From: not.my.real@email.address   
      
   Sylvain Robitaille wrote:   
      
   > On 2024-04-01, Henrik Carlqvist wrote:   
   >   
   >> The sneaky part in this is not that the main developer of xz trusted   
   >> "Jia Tan". The sneaky part is not that Linux distributions trusted   
   >> official source packages of xz. The sneaky part is that OpenSSH which   
   >> does not even itself depend upon xz or liblzma got a backdoor on   
   >> systemd based systems.   
   >   
   > I agree with this, and it makes me feel kind of vindicated in asking   
   > whether or not we really needed a new initd.  (I've been asking that   
   > since before systemd came out; I don't recall what the previous initd   
   > proposed replacement was called ... oh yeah, "upstart" on Ubuntu)   
   > Especially one that's apparently trying to replace so many components   
   > of the running operating system.  Whatever happened to "do one thing,   
   > and do that one thing well"?  sshd on systems without systemd remained   
   > unaffected.  That has to be meaningful.   
      
   I read an article about it a few years ago and I remember thinking, "That   
   actually sounds like a pretty good idea... that I want absolutely nothing to   
   do with."   
      
   --   
   The best way to learn is from somebody else's mistakes.   
    -- Greg Archer, The Valdez Group   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)