[_3u10]

Google is everyday.

Dude acts as if when it’s open source he conducts a code audit before installing anything.

xz just proves how dumb this mindset actually is.

[realusername]

I'd say the opposite, xz proved how much effort it is to actually backdoor widely used open-source software as opposed to something where the Russian government (or another one) can just go knocking.

Nothing is perfect of course but the attack was insane in terms of complexity.

[_3u10]

Im sure state level actors are building clones of old software with little network functionality to pwned people en mass.