Where's the irony in it being discovered by a MS employee? As far as I know he was working on a personal project and decided to debug why SSH logins were taking

Where's the irony in it being discovered by a MS employee? As far as I know he was working on a personal project and decided to debug why SSH logins were taking longer than expected, and found the backdoor. > "Open Source" may help find bugs but it can just as easily help exploit them --- or as in this case, intentionally create and plant them. I don't get this stance. Saying the true nature of open source is also its weakness is an ad hominem IMO, usually spat out from people that dislike the open source ideology. What's the solution? Developing stuff at walled gardens and praying to god that the maintainers will be beneficent enough to report a security breach? We've seen how that works out, companies take a year or so to report a breach after the damage was done. > The fact that this possibility has been routinely dismissed for years doesn't make it any less of a real security threat. This is kinda like assuming that blockchain can prevent crypto fraud. It wasn't dismissed, it was just simply proven by experience that this is just FUD to undermine open source. And even if it is true, the good things coming out of OS ideology are much greater than the possible bad things. Let me give you an example of why this is FUD. ClamAV is an open source malware analysis tool and yet, it's being constantly updated with new malware signatures. The fact of it being open source did nothing to sever its ability of detecting malware.