I don’t agree with all the doom saying about XZ incident.
You just know orgs are going to return after Easter and panic about it unnecessarily (they’re likely still on Redhat 6). It doesn’t impact them as it was caught super early.
Regarding the narrative that there’s nothing that can be done about these type of attacks - I also don’t agree. There’s already a change in the pipeline to systemd which would have prevented it.
The thing needs rational, calm reaction and response.
Follow
It is generally the media that blow things out of proportion, then social media starts to do the same, armchair experts who don't know anything but convince people they do.
Meanwhile, if you want a rational informed discussion stick to here and or mailing lists etc
