Teppic

In time it may become a trade-off between new (with associated features and speed) Vs tried and tested/secure.
To us now this sounds perverse, but remember that NASA generally use very old hardware because they can be more certain the various bugs & features have been found and documented. In NASA’s case this is for reliability. I’ll concede ‘brute force’ does add another dimension when applying this logic to security.

This may also become an AI arms race. Finding exploits is likely something AI could become very good at - but a better AI seeking to obfuscate?

How long until US bans code from developers with ties to CN/RU?

That won’t happen because it would effectively mean banning all FOS which isn’t remotely practical.

Mobile friendly version:
https://m.xkcd.com/2913/

Edit: I noticed OP put the alt text in the comment after I posted this

A good summary here: https://arstechnica.com/security/2024/03/backdoor-found-in-widely-used-linux-utility-breaks-encrypted-ssh-connections/

It’s relatively quick and easy to fix if you have a live boot Linux usb stick …and probably a second machine so you can Google what to do. It’s just also rather worrying at the time.

deleted by creator

I really wish Excel would work on wine. It’s the only reason I do occasionally fire up windows on my duel boot. (And no the open source / browser based spreadsheet options don’t always suffice, brilliant as they are).