> The easiest way to verify that is by using a reproducible automated pipeline C...

		imoverclocked 62 days ago \| parent \| context \| favorite \| on: Could the XZ backdoor been detected with better Gi... > The easiest way to verify that is by using a reproducible automated pipeline Conversely, this is also an attack surface. It can be easy to just hit "accept" on automated pipeline updates. New source for bash? Seems legit ... and the source built ... "yeah, ok."