Bullying in Open Source Software Is a Massive Security Vulnerability

Bullying in Open Source Software Is a Massive Security Vulnerability

The Xz story from last month, where a malicious contributor almost managed to ship a backdoor to a number of major Linux distributions, included a nasty detail where presumed collaborators with the attacker bullied the maintainer to make them more susceptible to accepting help.

Hans-Christoph Steiner from F-Droid reported a similar attempt from a few years ago:

A new contributor submitted a merge request to improve the search, which …

backdoor contributor linux linux distributions major managed massive open source opensource open source software security security vulnerability ship software story them vulnerability