Question for the beautiful people out there who main guixsd: did guix's whole reproducible builds thing prevent the xz backdoor? I heard it was only present in binaries from the maintainer, so #guix should be immune right?
Also, its activation conditions were pretty strict (both at build time as well as at runtime), so there's a good chance it wouldn't enable itself there even if the malicious sources were used.
@robryk aaaah