The Xz story from [last month](https://simonwillison.net/2024/Apr/5/everything-i-know-about-the-xz-backdoor/), where a malicious contributor almost managed to ship a backdoor to a number of major Linux distributions, included a nasty detail where presumed collaborators …
Social engineering is one of the most underestimated attack vectors. It doesn’t matter how cryptographically secure your system is if you can just ask for access.