ulterno , 4 months ago

upvote.au/comment/818245

Nah, I’d say the chap was pretty unsloppy.
Just that we were lucky that someone found it.

It’s a good thing that xz is a type of program that people may want to profile.

But this is an eye opener for people saying that Linux is “secure” (not more secure, but just secure .) because the code has many eyes on it.

This confirms my suspicion that we may be affected by the bystander effect, so we actually have less eyes than required for this.