The xz Backdoor Should Not Happen Again: two ideas on prevention(techblog.bozho.net)

techblog.bozho.net

The xz Backdoor Should Not Happen Again: two ideas on prevention

https://techblog.bozho.net/the-xz-backdoor-should-not-happen-again/

1 comments

There's clearly a demand for having an AI go through every public PR in terms of code quality and security. But something generic like ChatGPT-4 doesn't seem to be capable of catching this from just looking at the diffs.