I'm not saying incomprehensible build scripts are good here, my mistake for making it seem that way. I'm not confident that hiding it elsewhere would have been strictly more obvious but it absolutely could have been.
I've done some pretty complex C projects and haven't had build scripts nearly that large. This one seems particularly unwieldy and certainly helped the attacker.
I'm going to be honest, I'm getting a little tired of hearing everyone's thoughts on the xz backdoor. It's discouraging and sucks when every detail of the project which, keep in mind, was maintained by one person who fell victim to a social engineering attack, is scrutinized. It makes me concerned about anyone depending on any of my projects.
Especially the comments on things such as the build scripts, which this kind of article seems to gravitate towards. If the build scripts were tiny and checked then the attack vector would have just been different, I'm not even too sure the language mattered. The attack was social engineering, after that it was pretty much project agnostic. xz was targeted cause the maintainer was done working on it and it was heavily depended on.
Had to re-read the title more times than I'd like to admit to recognize that "sick" didn't mean the flowers were really awesome.
Façade
Oh kids were still doing this at my high school 3 years ago.
Well it's like my grandmother always used to say: "Capitalism is like a death trolley barrelling down 1000 miles of track towards you"
Never actually heard anyone exclude the hour, it's always "half past 3", "quarter to 8", "5 till 6", etc
The only time I've gone that long without eating was when I was stressed beyond belief. It was excruciating and I cannot imagine doing that willingly.
i is already initiated so the first statement isn't necessary so it's empty.
The loop is ended with a conditional break statement so the loop end criteria isn't necessary so it's empty.
We want each iteration to increment i so it's i++
That's how you end up with (;;i++)
Rural areas are less an applicable argument against walkable city development. I've lived in rural Tennessee for a lot of my life, I understand; however, talking about that environment in the context of city development discussions doesn't make sense.
Making me realize I never set up a profile