The problem with this philosophy is that it’s basically how ads started on the internet and now we’re here.
Oh it’s just a small, non-intrusive side bar ad, thats okay… oh it’s just ads on both sides… oh it’s just an additional ad on top and on the bottom… oh it’s just an easily dismissed pop up ad… oh it’s just a short video to watch before I’m allowed to see the site… repeat ad nauseam (no pun intended)
It also breaks your ability to do some actions with steam such as changing your email address because god forbid you enter the TOTP instead of pressing accept or something in the app
This is currently me, wanting to update my email but not wanting to go through the hassle of changing my authenticator back to my steam app then re exporting the key to put it back in Bitwarden.
So frustrating that they have to be ✨special✨ with their authenticator algorithm AND ALSO require the app for people who have reverse engineered it.
Not regular Fedora, though, it was only in Fedora Rawhide and Fedora 41, so very very early, bleeding edge distributions. Nothing that a regular Fedora user would be using.
As the other person said it’s likely that xz is already installed on your system, but almost certainly a much older version than the compromised one. It’s likely that no action is required on your part assuming you’ve not been downloading tarballs of bleeding edge software.
As the other person said, just keep doing updates as soon Mint recommends them (since it’s based on Ubuntu LTS, it’s a lot less likely to have these bleeding edge vulnerabilities).
Would another less complex answer simply be that many (most?) people and organizations use RSA because it was first and elliptic signing is not yet as prevalent?
Damn, I was just looking into and learning about the different main compression (gzip, bzip, xz) algorithms the other week. I guess this is why you stick to the ol’ reliable gzip even if it’s not the most space efficient.
Genuinely crazy to read that a library this big would be intentionally sabotaged. Curious if xz can ever win back trust…
The problem with this philosophy is that it’s basically how ads started on the internet and now we’re here.
Oh it’s just a small, non-intrusive side bar ad, thats okay… oh it’s just ads on both sides… oh it’s just an additional ad on top and on the bottom… oh it’s just an easily dismissed pop up ad… oh it’s just a short video to watch before I’m allowed to see the site… repeat ad nauseam (no pun intended)