I pull my hat to the people handling the recent security incident on the FreeBSD infrastructure.
Guys:
- Thanks a lot for the countless hours you invested to find and close the initial attack vector.
- Thanks a lot for the countless hours you invested to get the machines back to a well known state.
- Thanks a lot for the countless hours you invested to verify the source repository.
- Thanks a lot for the countless hours you invested to get back to a trusted package building environment.
- Thanks a lot for the countless hours you invested to get the “remaining” infrastructure (and everything else I forgot to mention) back into a good state.
Or in short: Thanks a lot for the countless hours you invested to get us from “we’re busted” to “we’re back”.
And last but not least, thanks for the decision to be better safe than sorry regarding our userbase (while it is the only way to handle something like this in a OSS project, I unfortunately think it has to be mentioned instead of taking it as an obvious decision).
