@eighthave @WPalant It sounds like the person got frustrated and left the project after trying for four months to have their changes approved. From reading the thread, I don’t blame them.
Conversation
Notices
-
Embed this notice
Aral Balkan (aral@mastodon.ar.al)'s status on Friday, 17-May-2024 18:23:38 JST Aral Balkan
-
Embed this notice
Hans-Christoph Steiner (eighthave@social.librem.one)'s status on Friday, 17-May-2024 18:23:39 JST Hans-Christoph Steiner
@WPalant Because the submitter deleted their account as a response to the review, I think it could be an deliberate attempt to insert the vuln. Plus all the attention from random new accounts. If it had been a normal review process, I could see how it could have been an honest mistake. But that scenario also makes it more attractive to the attacker, since making a mistake there is quite plausible, and could serve as an easy cover story.
-
Embed this notice