Comments by "Mikko Rantalainen" (@MikkoRantalainen) on "xz Exploit Is WILD - Must See Bash Part" video.

  1. 48:59 In the team where I work, when you do code review and accept the code, you'll be the one fixing the bugs when the original author is on the holiday. That results in automatic "nope" whenever some piece of code cannot be understood. A code like the crap in this m4-file is clearly either an exploit or totally unmaintainable. Either way, it doesn't get to live in the official master branch. I'm not sure if I'm just old enough but the bash scripts seemed easy to understand compared to the m4-stuff.
    3
  2.  @guillaumebrunerie  Same happens with npm way too often. The code you get from npm doesn't match the code published in GitHub for many projects!
    1