On: Social engineering takeovers of open source projec...

[fancyfredbot]

Doesn't have to be a takeover. If I'm a state actor I'll maintain a few projects specifically so I can hide backdoors in them. When/if one gets popular and I decide to backdoor them I'll claim it was a social engineering takeover.

[lnenad → fancyfredbot]

Exactly, pick something that is expensive right now, make it free and people will use it.