[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: when will we finally throw away binary uploads (Re: Please upgrade your build environment when you are affected by transition



On Thu, Feb 13, 2014 at 07:46:53PM +0100, Jakub Wilk wrote:
> *shrug* It's not like it's difficult to hide malicious code in
> source packages.
> 
> How many configure scripts that we never rebuild from source
> contains trojans?

Just like my favourite Russ quote:

  Basically, people got tired of portability problems in building shared
  libraries so they hid them all inside a multi-thousand line shell script
  where no one can ever find them because everyone who tries goes blind.
   -- Russ Allbery

-- 
Colin Watson                                       [cjwatson@debian.org]


Reply to: