He ran the binary, saw the lag and then investigated by looking at source code and tarballs. With closed source code he most likely would have shrugged his shoulders about the lag and moved on.
You have a very high opinion of code review. If...
Obligatory https://xkcd.com/2347/
I feel for this dude, shit situation.
I imagine unlocking the "nation state tried to infiltrate my project and wreak untold havoc" achievement is quite a lot to take in.
There's a lot of information about this backdoor that is missing in this thread and it adds a lot to the discussion. Before i get into that though:
I don’t understand how anybody sees this backdoor and thinks that open source is insecure. This...
All the years here on [H] and this is the thread I'm most disappointed in. Not a single person gave the right answer. You should all be ashamed. While I understand that rebuilding is a pain in the ass, with Windows there's only one answer. :)...
Yep. You can have multiple kernels installed.
Ubuntu LTS does the same thing if you enable the Hardware Enablement kernel. It gives you a later kernel version than what ships with the LTS. You then get updates for the old kernel and the HWE...
I add many of the lists from Developer Dan. https://www.github.developerdan.com/hosts/
I find that between the default list and DD lists I'm covered very well.
Recently I did add a few more that is probably a lot of overkill, but my children...