Wyre to CybersecurityEnglish · 2 年前GitHub disables XZ Repositorywww.phoronix.comexternal-linkmessage-square19linkfedilinkarrow-up1228arrow-down14
arrow-up1224arrow-down1external-linkGitHub disables XZ Repositorywww.phoronix.comWyre to CybersecurityEnglish · 2 年前message-square19linkfedilink
minus-squaresugar_in_your_tealinkfedilinkEnglisharrow-up1·2 年前Ah, I saw a PR from like 3 years ago that removed it, so it looks like you added it back in for performance. Have you tried contributing it upstream? I’m not a “no unsafe” zealot, but in light of the xz issue, it would be nice.
minus-squareKilling_Spark@feddit.delinkfedilinkEnglisharrow-up1·2 年前 Have you tried contributing it upstream? I didn’t yet just because I didn’t get around to it (and because I am not sure the std lib even wants this feature). I’m not a “no unsafe” zealot, but in light of the xz issue, it would be nice. I don’t think the two relate. I wouldn’t drop any dependency, the ringbuffer is implemented in the same repo.
minus-squaresugar_in_your_tealinkfedilinkEnglisharrow-up1·2 年前Yeah, they’re not really related. I’m just thinking there might be more scrutiny on compression due to the exploit. That said, yours doesn’t support encoding anyway, so it’s kind of moot.
Ah, I saw a PR from like 3 years ago that removed it, so it looks like you added it back in for performance.
Have you tried contributing it upstream? I’m not a “no unsafe” zealot, but in light of the xz issue, it would be nice.
I didn’t yet just because I didn’t get around to it (and because I am not sure the std lib even wants this feature).
I don’t think the two relate. I wouldn’t drop any dependency, the ringbuffer is implemented in the same repo.
Yeah, they’re not really related. I’m just thinking there might be more scrutiny on compression due to the exploit.
That said, yours doesn’t support encoding anyway, so it’s kind of moot.