Re: GNU Coding Standards, automake, and the recent xz-utils backdoor

2024-04-04 Thread Richard Stallman
[[[ To any NSA and FBI agents reading my email: please consider]]] [[[ whether defending the US Constitution against all enemies, ]]] [[[ foreign or domestic, requires you to follow Snowden's example. ]]] > > Another related check that /would/ have caught this attempt would be > > com

Re: GNU Coding Standards, automake, and the recent xz-utils backdoor

2024-04-04 Thread Richard Stallman
[[[ To any NSA and FBI agents reading my email: please consider]]] [[[ whether defending the US Constitution against all enemies, ]]] [[[ foreign or domestic, requires you to follow Snowden's example. ]]] > I would like to clarify that my purpose in starting this thread wasn't > so muc

Re: GNU Coding Standards, automake, and the recent xz-utils backdoor

2024-04-04 Thread Richard Stallman
[[[ To any NSA and FBI agents reading my email: please consider]]] [[[ whether defending the US Constitution against all enemies, ]]] [[[ foreign or domestic, requires you to follow Snowden's example. ]]] > > Now for a bit of speculation. I speculate that a cracker was careless > > an

Re: GNU Coding Standards, automake, and the recent xz-utils backdoor

2024-04-04 Thread Bruno Haible
Richard Stallman commented on Jacob Bachmeyer's idea: > > > Another related check that /would/ have caught this attempt would be > > > comparing the aclocal m4 files in a release against their > (meta)upstream > > > sources before building a package. This is something distribution > >