Post #3276444

2026-04-29 19:33 UTC

@vwbusguy@mastodon.online @bookwar@floss.social there's a big difference between contributor and person not contributing. And that's the difference i was referring to. Except it was happy coincidence. Distros have no checks for stuff like that and package maintainers often do the bare minimum, just to get package going. All with the snark and act of being better than others🙃 In this case someone was bothered by a couple milliseconds of slowdown and they checked that. It's impossible to say that about virtually everything else, since no human ever checks every software they package. It's impossible.

Replies (1)

@vwbusguy@mastodon.online 2026-04-29 20:50

@tragivictoria@mastodon.catgirl.cloud @bookwar@floss.social I don't think downplaying the diligence of a contributor who identified a vulnerability that a likely state actor backed by unfathomable resources had taken considerable time in a targeted effort to pull off as a "happy accident" is a fully fair portrayal. In fact, it's a damn good argument for why community Linux distros and open source are so freaking awesome.

Open ##3276445