You are accusing GP of something very serious, and while I see the direction you're coming from, I don't understand how accusations or insinuations like theone you're providing here are acceptable without significant additional justification or explanation.

Does that make sense? Do you think there's a chance that the person you're replying to is "not racist"?

Let’s step away from the extremist position and there’s an interesting problem underneath.

If a company or government organization is hiring engineers who will be responsible for critical code, they will undergo background checks at a minimum to ensure they are not an obvious threat to the organization. This isn’t about “country of origin”, but about the criminal history and ties of the individual regardless of origin.

In a government setting, security clearances will be required on top of basic background checks.

The FOSS community doesn’t have the tools to do this kind of screening, and arguably the openness of the community is what makes it successful.

But the uncomfortable reality is that there are indeed malicious actors, and the community doesn’t currently have a mechanism to proactively identify them and instead relies on discovering the results of their malicious behavior.

I don’t claim to know the solution, or if there even is one, but the existence of this comment thread is exhibit A for why we need to be thinking hard about how to proceed as a community.

FOSS projects are in the big leagues now, and will continue to come under threat from increasingly sophisticated actors.

Anyone that maintains a critical piece of code could get compromised by threats and blackmail, regardless of how clean they were.

I read the comment as -- we shouldn't hand control of valuable open source projects over to probable operatives of government security services. (Indeed, as many have mentioned, US intelligence might be behind this.)

Do you disagree with that? Or do you think OP meant something different? Because if they did it went right over my head.

I read it more as "random people on the internet may be part of some country trying backdoor software because countries are sngaged in cyber warfare, so actually meet the people you want to hand over access to"