4 ms·

I’m gonna cry survivorship bias here. How do we know how many similar attempts succeeded?

• bsza 3y ago
  Right, we don’t know that, but we have yet to hear of one case where a supply chain attack on a FOSS project resulted in someone getting arrested.