We've come to an icky time in security when the concern about using outdated, unpatched software starts to become overshadowed by the fear of downloading some backdoored update.

[briankrebs@infosec.exchange]

We've come to an icky time in security when the concern about using outdated, unpatched software starts to become overshadowed by the fear of downloading some backdoored update.

[lmk@infosec.exchange]

@briankrebs Maybe what's new is awareness leading to concern: we've had this "rock and hard place" choice for many years. Everyone saw it coming but did nothing: the proverbial boiled frog.

[valhalla@social.gl-como.it]

@lmk @briankrebs I think that the people involved with reproducible builds in distributions *have* been doing something, if not to solve the issue at least to mitigate it?

Of course it does only help inside those distributions.