The Xz backdoor and a near miss on the F-Droid app store show how the entitled attitude of some people in the open source community can be used to push malicious or insecure code.
    • null@slrpnk.netEnglish
      2·
      9 个月前

      It’s not a dumb point so much as just naive – and its the lesson we learned from the xz backdoor.

      Sure the source code is out there for anyone to see, but are the right people actually looking?