@bagder > false identity and I do ask nor not keep track in which country
Typo? Did you mean "I do not ask nor keep track"?
@CodingThunder thanks, will fix
@bagder Also if you want to you can definitely keep track of where curl maintainers live. Whispers *Just look at github organisation logs*
@CodingThunder it would be utterly naive of me to assume that it would A) show the correct country always and B) that just because they login from a specific country they live there or are residents of that country...
@bagder 'Our policy says that if a contrition is good'. I guess you meant 'contribution'.
@yashin oops, will fix. Thanks!
@bagder that book title...
@bagder typo: "update the webpage which a fake checksum"
@jplatte thanks, will fix asap
@bagder@mastodon.social small correction: to my knowledge, OSS-Fuzz would not have found the backdoor, as it builds from git not from the release tarballs. The attacker disabled the feature used as part of the attack because it was inducing memory/address sanitizer crashes, which is known to be unsupported for ifunc. valgrind on user systems caught it, but they covered up the reason when patching.