I WAS Thinking About Removing XZ Until This...

[@bundesrepublikdeutschland7282]

Time the recompile everything!!! Yay!... (This is the worst thing that can happen to a lfs user rip)

[@spiral09]

Only a binary that allow access to your system via the web is concerning

[@darkraven4207]

Can you share your distro iso file.

[@zeckma]

It'd take work for no real benefit, because the distro was made for me and not for anyone else, really, so stuff probably won't work. I recommend just making your own distro and using ALFS to get most of the work done for your system.

[@Micecheese]

@@zeckma which distro did you use as a "host" for LFS? also, was it a liveCD or installed beforehand? i do not want to have missing deps or such due to my installs thanks.

[@zeckma]

@@Micecheese Gentoo GUI LiveCD

[@lilithisaperson]

I’m too stupid to understand your content and what’s happening on screen :,)

[@zero0bb]

xz was a util that was compromised, lzma is a part of xz, everything he lists there using the "grep" command shows the binary files (of executables) that depend on lzma, essentially meaning he'll have to recompile them all manually

[@zeckma]

​@zero0bb she* but yeah that is correct

[@ATeaGod]

​@@zero0bb isnt the backdoor patched now?

[@zeckma]

It has been patched for a while. Back when it happened though, there was a lot of paranoia and conversations happening, and while I wasn't too paranoid (although I was indeed paranoid to a degree) I thought to just strip xz support... and this video demonstrated why I stopped trying that.

[@ATeaGod]

@@zeckma ohh ok xD