Intentionally buggy commits for fame—and papers

The recommendations for improving the patching process in their response[1] was laughable as well:

> OSS projects would be suggested to update the code of conduct, something like “By submitting the patch, I agree to not intend to introduce bugs."

Because just asking nicely not to be backdoored will apparently stop malicious actors. Bonus points that they assume receiving malicious backdoors is opt-out.

> We need automated tools for testing and verifying patches.

What an original idea.

>OSS maintaining is understaffed.

This one is pulled straight from an HN headline or something, and is once again not really making a novel observation, which is especially bad considering they actively contributed to the issue.

And their last recommendation is just an advertisement for their paper.

[1]: https://www-users.cs.umn.edu/~kjlu/papers/clarifications-hc.pdf