6 ms·
The Git repositories of XZ projects are available on GitHub again
- stux 2y agoEdit: nvm, dupe of https://news.ycombinator.com/item?id=39984512 https://news.ycombinator.com/item?id=39984512
- abricq 2y agoI notice that user JiaT75 is still the second biggest contributor of the project. Interesting that his account is still alive.
- OJFord 2y agoHaving your code reverted only decreases your contribution metric in the sense that the denominator grows but it's someone else's (the reverter's) numerator: it's based on commits, not git blame.
- type0 2y agoyeah, so maybe Jia should get maintainer rights after all /s
- rvnx 2y agoYou are all quick judging here, let's not forget presumption of innocence
- axus 2y agoI think that's what got xz into trouble in the first place.
- phkahler 2y ago>> let's not forget presumption of innocence Are you trying to be sarcastic?
- wormius 2y agoNice try rvnx... or should I say... JiaTan! /sarc
- rvnx 2y agoI doubt that the NSA would condemn themselves. So it could be that they stay innocent forever. Intriguing that Microsoft didn't disclose the IPs, intriguing that the actors use mostly American services, some obscure American VPN as well, etc.
- shp0ngle 2y agoThe actual maintainers of the repo seem to take the position that all "Jia Tan" commits are backdoor-free unless proven otherwise, so most of his commits still stay (as they* did a LOT of actual, real work on the repo). I am curious what people think about that. It's still around 30k lines of code made by a known malicious entity, looking at git blame. However it seems mostly fine? * plural "they" ;)
- cedws 2y agoI'm surprised that this implementation of xz written by... well... random people has been adopted so widely. I would've expected a more 'industrial' implementation managed by Google or Meta or something, but there isn't one.
- BuildTheRobots 2y agoI'm still baffled xz took off so massively in the first place. The USP seems to be existing LZMA compression but made significantly more fragile and prone to never decompressing again.
- cqqxo4zV46cp 2y agoThis is very much the well-known reality.
- treffer 2y agoCompression algorithm implementations are not for everyone. The math and algorithms behind it are fun to learn but hard. And then you need to implement it both performant and correct. Only a few people build up the algorithmic background to do this. And the gains once an implementation is there are marginal (optimizations). The only larger one seems to be zstd, and I haven't wrapped my head around ANS/tANS...
- Dalewyn 2y ago>I am curious what people think about that. If someone wants something done right, FSVO right, they can do it themselves.
- deleted 2y ago[deleted]