A few relevant quotes

I'm on a holiday and only happened to look at my emails and itseems to be a major mess.

The reality that we are struggling with is that the free softwareinfrastructure on which much of computing runs is massively andpainfully underfunded by society as a whole, and is almost entirelydependent on random people maintaining things in their free timebecause they find it fun, many of whom are close to burnout. Thisis, in many ways, the true root cause of this entire event.

Incredible work from Andres. The attackers made a seriousstrategic mistake: they made PostgreSQL slightly slower.

There is no way to discuss this in public without turning a singlemalicious entity into 10000 malicious entities once theinformation is widely known.

Making sure the impact and mitigations are known before postingthis publicly so that everyone knows what to do before the 10000malicious entities start attacking is just common sense.

Again the FOSS world has proven to be vigilant and proactive infinding bugs and backdoors, IMHO. The level of transparency isstellar, especially compared to proprietary softwarecompanies. What the FOSS world has accomplished in 24 hours afterdetection of the backdoor code in #xz deserves a moment ofhumbleness. Instead we have flamewars and armchair experts shoutingthat we must change everything NOW. Which would introduce even morerisks. Progress is made iteratively. Learn, adapt, repeat.