Re: Sourceware mitigating and preventing the next xz-backdoor

Stephen Webb via Gdb
2024-04-03T14:57:29Z

On 2024-04-03 10:33, Martin Uecker via Gdb wrote:
> I ask a very specific question: To what extend is testing
> for features instead of semantic versions and/or supported
> standards still necessary? This seems like a problematic approach
> that  may have been necessary decades ago, but it seems it may be
> time to move on.

Using feature detection is entirely unnecessary if you guarantee you're
only every going to target self-hosted builds on x86_64-linux-gnu
running on recent commodity server or desktop hardware.

For everything else, yes, it's absolutely required.

--

smw

----------------------------------------------------------------------
This transmission (including any attachments) may contain confidential information, privileged material (including material protected by the solicitor-client or other applicable privileges), or constitute non-public information. Any use of this information by anyone other than the intended recipient is prohibited. If you have received this transmission in error, please immediately reply to the sender and delete this information from your system. Use, dissemination, distribution, or reproduction of this transmission by unintended recipients is not authorized and may be unlawful.