What we know about the xz Utils backdoor that almost infected the world

Re:What we know about the xz Utils backdoor that almost infe... by hk__2 on Monday April 01, 2024 @07:27AM (#39892961)

> Is that common to only communicate only through email/github?

Yes. I’ve joined half a dozen open-source projects of various sizes (from 100 to 30k stars on GitHub) without ever calling anyone; written communication is the standard.

[ Parent | on HN ]

Re:What we know about the xz Utils backdoor that almost infe... by bogwog on Monday April 01, 2024 @08:37AM (#39893492)

Sure, but handing over maintainership is a different situation from accepting a few PRs

[ Parent | on HN ]

Re:What we know about the xz Utils backdoor that almost infe... by saalweachter on Monday April 01, 2024 @12:29PM (#39895943)

Have you ever interacted with a volunteer organization?

If you show up for a tea & cookies meet-and-greet and aren't careful, they'll nominate you for chair just because no one else wants it, and "showed up once to a scheduled event" is a higher bar than half the other members have met in while.

[ Parent | on HN ]

Re:What we know about the xz Utils backdoor that almost infe... by mardifoufs on Monday April 01, 2024 @01:08PM (#39896379)

I don't think he ever fully gave up his "top maintainer" status or gave away the repo. He just let Jian have defacto maintainership because no one else was really contributing

[ Parent | on HN ]