1
NixOS and reproducible builds could have detected the xz backdoor
In March 2024, a backdoor was discovered in xz, a (de)-compression software that is regularly used at the core of Linux distributions to unpack source tarballs...
PhD student working on NixOS, software supply chains, and reproducible builds.
Visit luj.fr → RSS feedOn Hacker News Feb 2025 – Mar 2025
In March 2024, a backdoor was discovered in xz, a (de)-compression software that is regularly used at the core of Linux distributions to unpack source tarballs...
Build reproducibility is often considered as a de facto feature provided by functional package managers like Nix. Although the functional package manager model...