On Sat, 30 Mar 2024, Dominik George wrote: >Hmm, not worth much without signing commits. We'd need to be able to >verify it's the same Lasse Collin as 2020.
I’d rather go back to the very old xz as joeyh did. The one in bullseye, too, is likely safe. And I’d rather backport myself than sponsoring someone’s backport, for the same reasons I was wary in #1067708. tbh I don’t think sponsoring is a viable model for bpo anyway, as they need the backporter to take responsibility for the backported party. >Remember that the bad actor already successfully got a subdomain under >tukaani.org once. No, just the Github Pages thing larhzu pointed the host to in good faith. bye, //mirabilos -- 15:41⎜<Lo-lan-do:#fusionforge> Somebody write a testsuite for helloworld :-)
