Zero trust: How the ‘Jia Tan’ hack complicated open-source software

[rbc]

Matteo Collina has written software that’s on your computer. You probably aren’t aware of it, but it’s definitely there, maybe even being used to read this very article.

He also considers himself a vampire hunter.

Not the Van Helsing type, mind you. In Collina’s world of open-source software, he considers “vampires” to be anyone that wants those responsible for operating and maintaining open-source projects — known as maintainers — to provide “one-on-one support … without being willing to give anything” in return.
[...]
Zero trust: How the ‘Jia Tan’ hack complicated open-source software