Hacker News new | past | comments | ask | show | jobs | submit login

How do you track down a malicious maintainer, introducing a back door slowly during one year long, a little change at a time, given how long CVEs in OpenSSL have been unnoticed as example?



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: