• 0 Posts
  • 11 Comments
Joined 1 year ago
cake
Cake day: March 21st, 2024

help-circle

  • Well that’s certainly no light read - I’ll admit that I’ve only read the first six sections of the document for now

    The crux of it that I could see was the initial repo that was backdoored contained a malicious Windows command in the PreBuildCommand field of .vbproj file

    My initial thoughts would be that it might be advisable for build tools to confirm any defined build commands with the user when it detects a command not seen before?

    I suppose otherwise the argument could be made that if you’re downloading and compiling code that is backdoored, if you’re not checking .vbproj or equivalents, you’re probably also not auditing any source code either and you’re being pwned either way.





  • It’s a fair bit older than yours, but I’ve been so pleased with my X260. I originally got it as a side to my T480 but I find myself just taking the X260 when studying and leaving my T480 as a docked laptop because of the smaller form factor, battery life is way better (6 hours for my use) and for what I do (attending online classes, programming, and other studies) the performance is good enough (on LMDE, it probably wouldn’t take Windows well anymore)

    The later X series like the X280 have options for quad core processors I believe if you wanted more performance. Given I only paid $120AUD for my X260 and I like the slight chunkiness of it (feels more rugged for on the go) that the X280 lost, I’m not upgrading anytime soon.