Re:XZ Backdoor: Times, damned times, and scams
by fbdab103 on Sunday March 31, 2024 @11:39PM
(#39890713)
That effectively means you cannot share commit rights with anybody. How am I supposed to vet someone as not a state actor? Any plausible test could be thwarted by a motivated individual.
[ Parent
| on HN ]
Re:XZ Backdoor: Times, damned times, and scams
by 1letterunixname on Monday April 01, 2024 @02:05AM
(#39891303)
Synchronous socialization and meeting their friends and fam. Not knowing people well is a vulnerability.
Re:XZ Backdoor: Times, damned times, and scams
by someotherperson on Monday April 01, 2024 @02:28AM
(#39891379)
A state actor is potentially the only person financially supported enough and willing to do this.
"You're in Zurich this weekend? Oh wow, me too. I'm holidaying with my wife. Let's grab lunch" as they proceed to prepare their military expense form for two business class tickets for them and their coworker