I keep brooding on the way the xz backdoor was enabled in significant part via weaponizing the FOSS culture of shitty behavior and abuse.

Yes, there're other pathologies at work here (the big tech capitalist pillaging of the commons, etc).

But what is striking is that the uncool, mean standards of FOSS conduct that many of us have decried for years, & that many defended as authentic, tough, etc., ended up not just being exclusionary loser behavior, but a significant attack surface.

@Mer__edith true, but, also not true. I mean, in my life of working in and adjacent to FOSS I've had some shitty experiences, but I've also had the best ever -- high floating on clouds for 3 days kind of best. It's specific communities that are toxic, or wholesome.