Otto Kekäläinen

Popular posts: 2
Total points: 236
HN comments: 136
Rank: #11,100 personal

Visit optimizedbyotto.com → On Hacker News May 2025 – Oct 2025

Open Source 2 Security & Privacy 1 Infrastructure & DevOps 1

Most points Most discussed Most cited Newest

Could the XZ backdoor been detected with better Git/Deb packaging practices?

2025120 points110 comments Security & Privacy details

The discovery of a backdoor in XZ Utils in the spring of 2024 shocked the open source community, raising critical questions about software supply chain security. This post explores whether better Debian packaging practices could have detected this threat, offering a guide to auditing packages and suggesting future…

Creating Debian packages from upstream Git

2025116 points26 comments Open Source details

In this post, I demonstrate the optimal workflow for creating new Debian packages in 2025, preserving the upstream Git history. The motivation for this is to lower the barrier for sharing improvements to and from upstream, and to improve software provenance and supply-chain security by making it easy to inspect every…