> It's worth pointing out that we got lucky with a savvy tester stumbling on the backdoor in the dark. I believe in Bayesian probability a lot more than I beli

> It's worth pointing out that we got lucky with a savvy tester stumbling on the backdoor in the dark. I believe in Bayesian probability a lot more than I believe in luck. The fact that a random sysadmin investigating performance issues was able to rapidly unravel this whole thing is at least a minimal indicator that either (a) this particular attack was largely incompetent, and any of the many "savvy testers" in the community would have uncovered it within short order, but more sophisticated attacks might remain undetected, or (b) this was a sophisticated attack, and the community is generally resilient to this form of infiltration.