Guix substitute and guix pull vulnerabilities | Hacker News Reader