From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from smtp6-g21.free.fr (smtp6-g21.free.fr [IPv6:2a01:e0c:1:1599::15]) by sourceware.org (Postfix) with ESMTPS id 10AB43858401 for ; Wed, 3 Apr 2024 17:38:07 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 10AB43858401 Authentication-Results: sourceware.org; dmarc=pass (p=none dis=none) header.from=free.fr Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=free.fr ARC-Filter: OpenARC Filter v1.0.0 sourceware.org 10AB43858401 Authentication-Results: server2.sourceware.org; arc=none smtp.remote-ip=2a01:e0c:1:1599::15 ARC-Seal: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1712165888; cv=none; b=SK2hI2Tps/brwXg6RSFtBePgYYTudWYXENDFv4c3J0C10gvgcXogyykS2u+sfbqsCAmIa26COlkuqmGhqmiaV10RGOgTq7Yor1WjcpC8X+H2jVI1ac3VKYk5bzVF+BC4Tjh5w+U/eSHMspJ4MCdKs3eix4fLWR8DxRgO3L9t1T4= ARC-Message-Signature: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1712165888; c=relaxed/simple; bh=ToYQ7LyU+8Ns5xvCEfUUqUy3VsUSPu7grSgKSngHXKw=; h=DKIM-Signature:Message-ID:Date:MIME-Version:Subject:To:From; b=SIiCZ6okr0qMc5CXXlU+rEiUR10syh5kn6v3ZuwQgOhlRclfWGiw+n19m5rdoXDzUIo+ptSVbJP+72n4keY4DGeUktXeHKYcXOAvWebIMHATw4txLYBGiLo4JUmss5NZmLupMzmDhC5mQBeShii+BOJEnmVXz0Gq3A2FPANIxSo= ARC-Authentication-Results: i=1; server2.sourceware.org Received: from [IPV6:2a01:cb15:8010:2f00:1aa9:5ff:fe16:2efb] (unknown [IPv6:2a01:cb15:8010:2f00:1aa9:5ff:fe16:2efb]) (Authenticated sender: paulf@free.fr) by smtp6-g21.free.fr (Postfix) with ESMTPSA id B8B37780502 for ; Wed, 3 Apr 2024 19:38:05 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=free.fr; s=smtp-20201208; t=1712165885; bh=ToYQ7LyU+8Ns5xvCEfUUqUy3VsUSPu7grSgKSngHXKw=; h=Date:Subject:To:References:From:In-Reply-To:From; b=s5LlystgJJRmw7KbCyyTeqSmIDHZGVgySKSU5qz7sNDnxkHlJtzYKIqWVme9iYmV9 GdrFDP87H/ECaxza30q6B62Gr/9neH6MK0a3cFvGSrQVWjwAljEwFhEAF3U1DginWs sGnZDpDZchYW/u0D6TzR4fCIMHOHUmm+YOLPKTEXonqMMtTCop8TR9pip3Er5aZqQ8 ST8r6nr2mrCjYZcabJ8FCGOjqf/XwfbBayKm/E9hd6s5jHzxfqorCGbXwycsnRPRgI 1xYNnQ6ZTfNq6nbGaQ13jdvnv51x0b8C9yRa4FDJrOEPT5AhgCndm5E4Xxhb0YrnyR sgcDHnLi7IepA== Message-ID: <4194a94d-c1cb-431d-b5f2-288476d98bf4@free.fr> Date: Wed, 3 Apr 2024 17:38:05 +0000 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: Sourceware mitigating and preventing the next xz-backdoor To: gcc@gcc.gnu.org References: <20240329203909.GS9427@gnu.wildebeest.org> <20240401150617.GF19478@gnu.wildebeest.org> <12215cd2-16db-4ee4-bd98-6a4bcf318592@cs.ucla.edu> <6239192ba9ff8aad0752309a54b633dc75a57c77.camel@tugraz.at> <8e877d2f-01e0-c786-dea5-265edbdc0c07@suse.de> Content-Language: en-US From: Paul Floyd In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_FROM,JMQ_SPF_NEUTRAL,RCVD_IN_DNSWL_NONE,SPF_HELO_NONE,SPF_PASS,TXREP autolearn=no autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: On 03-04-24 14:32, Martin Uecker via Gcc wrote: > > The backdoor was hidden in a complicated autoconf script... How many uncomplicated autoconf scripts exist in the real world? A+ Paul