We know that sshd is targeted but we don't know the full extent of the attack yet.
Arch is on 5.6.1 as of now: https://archlinux.org/packages/core/x86_64/xz/
We at Nixpkgs have barely evaded having it go to a channel used by users and we don't seem to be affected by the backdoor.
Hmm, that shouldn't be the case could you open an issue on that?
Depends on what your use-case is. Mine is primarily control over my subscriptions, playlists, watch history etc. in a service-type architecture.
Um, they posted this a few days too early...
Does firefox appear in your previous closure? nix-store --query --tree /run/current-system/ | grep firefox
To the person receiving the money, it is worth it. Else they wouldn't be doing it.
Yes and that's precisely the point. You can make the decision not to pay and there are good reasons to do so (I do so too) but you must recognise that someone is still not getting paid for their work.
engineers don’t like reinventing the wheel.
Engineers aren't the ones to decide whether to reinvent the wheel or not.
Note that the diff does not necessarily correlate with the amount of data that changed, not how much additional space the snapshot takes.
Mine stopped working.