<![CDATA[We've come to an icky time in security when the concern about using outdated, unpatched software starts to become overshadowed by the fear of downloading some backdoored update.]]>We've come to an icky time in security when the concern about using outdated, unpatched software starts to become overshadowed by the fear of downloading some backdoored update.

]]>https://bbs.spacc.eu.org/new/topic/6e86634c-6b90-49fe-9526-3622d0dded77/we-ve-come-to-an-icky-time-in-security-when-the-concern-about-using-outdated-unpatched-software-starts-to-become-overshadowed-by-the-fear-of-downloading-some-backdoored-update.RSS for NodeTue, 10 Nov 2026 15:10:15 GMTTue, 12 May 2026 20:08:04 GMT60<![CDATA[Reply to We've come to an icky time in security when the concern about using outdated, unpatched software starts to become overshadowed by the fear of downloading some backdoored update. on Wed, 13 May 2026 18:48:47 GMT]]>@lmk @briankrebs I think that the people involved with reproducible builds in distributions *have* been doing something, if not to solve the issue at least to mitigate it?

Of course it does only help inside those distributions.

]]>https://bbs.spacc.eu.org/new/post/https://social.gl-como.it/objects/3e3ce0df-166a-04c7-8fe0-5f3093321542https://bbs.spacc.eu.org/new/post/https://social.gl-como.it/objects/3e3ce0df-166a-04c7-8fe0-5f3093321542Wed, 13 May 2026 18:48:47 GMT<![CDATA[Reply to We've come to an icky time in security when the concern about using outdated, unpatched software starts to become overshadowed by the fear of downloading some backdoored update. on Tue, 12 May 2026 23:12:32 GMT]]>@briankrebs Maybe what's new is awareness leading to concern: we've had this "rock and hard place" choice for many years. Everyone saw it coming but did nothing: the proverbial boiled frog.

]]>https://bbs.spacc.eu.org/new/post/https://infosec.exchange/users/lmk/statuses/116564135302563206https://bbs.spacc.eu.org/new/post/https://infosec.exchange/users/lmk/statuses/116564135302563206Tue, 12 May 2026 23:12:32 GMT