The Xz backdoor and a near miss on the F-Droid app store show how the entitled attitude of some people in the open source community can be used to push malicious or insecure code.
  • null@slrpnk.netEnglish
    2·
    3 months ago

    It’s not a dumb point so much as just naive – and its the lesson we learned from the xz backdoor.

    Sure the source code is out there for anyone to see, but are the right people actually looking?