I am a bit concerned by all the focus on small-ish projects with overwhelmed maintainers. There indeed are a lot of problems in that area.
But I am certain that lots of experienced OSS devs can think of a few large and crucial projects where they fairly easily could have hidden something small in a larger change. Without a lot of prior contributions to the project.
We have no mechanism to flag when J. Random Packager adds "Supplements: glibc" to their random leaf node package. As a reminder, *we are a project that allows 1,601 minimally-vetted people to deliver arbitrary code executed as root on hundreds of thousands of systems*, and this mechanism allows any one of those people to cause the package they have complete control over to be automatically pulled in as a dependency on virtually every single one of those systems.â Adam Williamson
I'm on a holiday and only happened to look at my emails and it seems to be a major mess.â Lasse Collin
Also if you're on F41 and/or think you might have installed the vulnerable xz anywhere, note that the exploit has not been fully analyzed and no one really knows what it could do. I'm currently reinstalling a couple of machines from scratch and have regenerated my SSH keys.
ðŠĶ Vernor Vinge, author of many influential hard science fiction works, died March 20 at the age of 79.
Inspired by the creation of the Full Circle film, which quotes extensively from the book, we have been working to bring Options back. Now, we're happy to say that Options is available, under the Creative Commons SA 4.0 license, in a number of forms. Enjoy!
As an aside, I have to say that the tools for scanning and OCR work have gotten pretty good. All of this was made possible by SANE, unpaper, tesseract, Sphinx, and surely some other tools I'm forgetting now.