Re: Backport request for xz-utils

On Sat, 30 Mar 2024, Dominik George wrote:

>Hmm, not worth much without signing commits. We'd need to be able to
>verify it's the same Lasse Collin as 2020.

I’d rather go back to the very old xz as joeyh did.
The one in bullseye, too, is likely safe.

And I’d rather backport myself than sponsoring someone’s
backport, for the same reasons I was wary in #1067708.

tbh I don’t think sponsoring is a viable model for bpo
anyway, as they need the backporter to take responsibility
for the backported party.

>Remember that the bad actor already successfully got a subdomain under
>tukaani.org once.

No, just the Github Pages thing larhzu pointed the host
to in good faith.

bye,
//mirabilos
-- 
15:41⎜<Lo-lan-do:#fusionforge> Somebody write a testsuite for helloworld :-)