Originally a thread on Twitter about the xz/liblzma vulnerability, when I finished typing it, I realized I had a real world slice of Open Source interaction that deserved more attention.
Originally a thread on Twitter about the xz/liblzma vulnerability, when I finished typing it, I realized I had a real world slice of Open Source interaction that deserved more attention.
I remember seeing examples like this before. People attack maintainers with the same verve as a big corporation that they’re paying services for.
There are humans behind these projects and very few people want to fund them despite relying on them as well.