corpus.blog
41,554 blogs · 5,225,211 posts Claim your blog
Record · corpus.blog/posts/01a0879d-38b3-711a-b9b7-5ede03a637e5

How NixOS and reproducible builds could have detected the xz backdoor for the benefit of all

luj.fr · published 20 March 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at luj.fr Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
14
Words captured
5,294

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
The xz attack shell script Read at the source ↗
research.swtch.com
XZ backdoor story – Initial analysis Read at the source ↗
securelist.com
https://arxiv.org/pdf/2404.08987
arxiv.org
https://guix.gnu.org/en/blog/2023/the-full-source-bootstrap-building-from-source-all-the-way-down/
guix.gnu.org
https://github.com/NixOS/nixpkgs/pull/300542
github.com
https://reproducible-builds.org/
reproducible-builds.org
https://arxiv.org/abs/2104.06020
arxiv.org
The new PostgreSQL 17 make dist Read at the source ↗
peter.eisentraut.org
https://github.com/NixOS/nixpkgs/pull/391569
github.com
https://www.cs.cmu.edu/~rdriley/487/papers/Thompson_1984_ReflectionsonTrustingTrust.pdf
cs.cmu.edu
https://www.theozimmermann.net/
theozimmermann.net
https://orcid.org/0009-0008-7972-7160
orcid.org
https://groundry.org/
groundry.org
https://upsilon.cc/~zack/
upsilon.cc
Elsewhere on luj.fr (1)