My takeaways from the sad #xzgate affair are:
- I’m old
- ppl don’t know C or autotools
- lotsa ambulance chasers
- lots unfamiliar w/ maintenance
- ppl with opinions + many followers

I’m realising more and more that most ppl with opinions out there are huge asses who just talk the talk. Very few actually working with shovels or even having seen the mud we speak of.

I’ll be out here, shipping my working software, making customers happy, and getting paid to do so. I’ll turn off the light …

I could of course say a whole lot more in the subject. Like distributions patching upstream as a rule, or daemon devs blindly linking weird kind, but even though I maintain my own successful init, I’m also guilty of the same.
The default readiness notification in Finit is pid files. It’s a much simpler patch to apply to projects, but still a patch. And for my non-init related projects I too link libsystemd.
I’m also a proud user of autotools. I love it because it’s works with all bizarre targets for my projects (all the UNIX variants as well as embedded/cross-compiling).
None of which are the root cause of this latest painful incident.