What's inscrutable code? Was it m4 or sh or the combination of the two? Who will... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		cryptonector on April 2, 2024 \| parent \| context \| favorite \| on: Timeline of the xz open source attack What's inscrutable code? Was it m4 or sh or the combination of the two? Who will pay for all the rewriting you want done? Or even just for the new frameworks that are "scrutable"? How do we guarantee that the result is not inscrutable to you or others? There is so much knee-jerking in this xz debacle. (And I say this / ask these questions with no love for autoconf/m4/sh.)

psanford on April 2, 2024 | [–]

I think this is pretty straight forward. Don't accept PRs for code that cannot be reasoned about easily.

hinkley on April 3, 2024 | [–]

We are all paying right now for it not being done.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact