3 ms·

Merging commits/PRs without reading them is how you get a 2024 xz situation.

• yard2010 1mo ago
  It still haunts me, that dot they slipped in, in one of the commits, every time I merge a PR
• kodoman 1mo ago
  Not just that how the maintainer was treated by the attacker which tells you something about the way people feel entitled to maintainers time and efforts for nothing even by people not looking to exploit the project. And the abuse after he received despite it being an easy mistake that the culture encourages people to make.
  • hypfer 1mo ago
    > And the abuse after he received despite it being an easy mistake that the culture encourages people to make. I believe that that was in part simply people defending their reality. Because if it's not the maintainers fault, then why did it fail? What are the implications of that? What does it mean for me personally? Do I have to do something differently? Do I have to change my assumptions? People do not like these feelings. They want to simply push them away. The easiest way of doing so is blaming that guy and being done with the negative emotion. Most people do suck at this whole "being human" business.
• __david__ 1mo ago
  I never suggested that you shouldn’t check the commit before merging!