"open source needs more funding!"
*nation state pays for backdoor*
"not like that!"
To be fair, this has similar vibes:
"I need money for rent!"
"Mobster pays you to stab someone."
"Not like that!"
@tenderlove I wouldn't be too. sure it's some nation state that put together the whole scheme. It could also be a case of 2-3 friends engineers (a'la Office Space), putting together something that's eventually sellable in crime and espionage markets. From the mailing list, it seems to be a job of 2-3 ppl originally, and not just the commiter.
@tenderlove they bought me a coffee though..
@tenderlove Take the boost I'm laughing and angry because my server was vulnerable due to the CVE for 24hrs...
@tenderlove Hmph. All you hippie whiners acting like no struggling Sicilian church ever accepted protection from the Mafia in exchange for the priest and deacon turning a blind eye to drugs and guns being transshipped in caskets. Naïfs!
@tenderlove yeah, but actually
@tenderlove this reminds me of Red Flag Linux days. Ohh how young and naive we were then 🥲
@tenderlove :D
BTW nation state can out a gun on the maintainer andnforce them to release a vulnerable package.
Or put them in a prison without anyone noticing and take the ownership of the package.