Comments by "Gilad Barlev" (@GSBarlev) on "The Grifters Of The Linux XZ Backdoor" video.

  1. The best "best practices" are ones that end up saving the developer time and effort. - autoformatters (like black for Python) - pre-commit - build automation (yes, like slsa, but more like any of the billion one-line actions in GitHub Marketplace) - cookie-cutter project templates that set up your project with all these tools for you
    1
  2. Donation doesn't even mean money, it could be time, PRs or even bug reports. The issue is that legal departments hate when developers make open source contributions, because the very knowledge that BusinessCorp uses common_package is somehow a "trade secret."
    1