testeronious@lemmy.world to Linux@lemmy.ml · 10 months agoXZ Utils is back on GitHub and Lasse Collin has been unbannedgithub.comexternal-linkmessage-square59fedilinkarrow-up1493arrow-down15
arrow-up1488arrow-down1external-linkXZ Utils is back on GitHub and Lasse Collin has been unbannedgithub.comtesteronious@lemmy.world to Linux@lemmy.ml · 10 months agomessage-square59fedilink
minus-squareAuli@lemmy.calinkfedilinkEnglisharrow-up10arrow-down5·edit-210 months agoYes but damage seems to be done. Distros are talking or have moved off of it to zstd.
minus-squareBillegh@lemmy.worldlinkfedilinkarrow-up22arrow-down1·10 months agoThere are some, probably. But any exodus will be slow. Xz isn’t useless because it was dangerous once.
minus-squareintrepid@lemmy.calinkfedilinkarrow-up13·10 months agoBesides, XZ isn’t the only project in such a danger. Banning doesn’t solve that problem. They need to put in more funding and eyes.
minus-squarePlexSheep@infosec.publinkfedilinkarrow-up10·10 months agoZstd and xz fullfil different needs. Xz take more time to compress and is faster to decompress as far as I know.
minus-squareCalyhre@lemmy.worldlinkfedilinkarrow-up9·10 months agoI would argue this might make xz safer mid-term. So much eyes on it. I’m not familiar with other solutions, but who’s to say the bad actor won’t try a similar trick elsewhere
Yes but damage seems to be done. Distros are talking or have moved off of it to zstd.
There are some, probably. But any exodus will be slow. Xz isn’t useless because it was dangerous once.
Besides, XZ isn’t the only project in such a danger. Banning doesn’t solve that problem. They need to put in more funding and eyes.
Zstd and xz fullfil different needs. Xz take more time to compress and is faster to decompress as far as I know.
I would argue this might make xz safer mid-term. So much eyes on it. I’m not familiar with other solutions, but who’s to say the bad actor won’t try a similar trick elsewhere