The TAB report on the UMN affair

If I find a suspicious set of commits submitted into a project I work on, then “raising possible incidents with the TAB” will be the last thing on my mind. First ones:

- Immediately revert everything suspicious, even by association, until cleared;
- Notify anyone you can who might have used the code that it may contain backdoors.

The first and only priority of any project is its users, not a committee somewhere. Risking users’ security for the sake of appeasing some bureaucrats from universities is not.