actually, i somewhat ponder whether the harassment i got to add a maintainer to ifupdown-ng was part of a XZ-type attack from an APTbecause, you know, compromising a tool that runs as root in early boot and configures things like VPNs is probably a val...

[ariadne@social.treehouse.systems]

actually, i somewhat ponder whether the harassment i got to add a maintainer to ifupdown-ng was part of a XZ-type attack from an APT

because, you know, compromising a tool that runs as root in early boot and configures things like VPNs is probably a valuable target

[ariadne@social.treehouse.systems]

keep in mind, my response to this was basically to ignore them (which was easy because their PRs had very obvious errors) until i was forced to basically tell them to fuck off publicly.

[irenes@mastodon.social]

@ariadne ha, well, whether it was an attack or not, it definitely illustrates our point about how a robust community that teaches boundaries and stuff, and doesn't leave people socially isolated, is a strong defense

(cf. https://cohost.org/ireneista/post/5349137-xz-and-community )

[ariadne@social.treehouse.systems]

@irenes oh yes, i have some degree of confidence that i am not the type of maintainer that could be bullied into adding a nation-state threat actor to a maintainer position

[irenes@mastodon.social]

@ariadne :3

[ariadne@social.treehouse.systems]

@irenes (but nonetheless i did merge some of that person's work, and i am now re-checking those commits to make sure i didn't do a fuckywucky)

[irenes@mastodon.social]

@ariadne for all that we already knew how incredibly important community-building is, it's quite something to see how broad its effects can be

[irenes@mastodon.social]

@ariadne yeah, good idea to check for sure