Real talk for a moment, there isn’t a system alive that currently solves the supply chain attack issue. there’s a trade-off between usability, and security. You can be a secure as you want to be, all it takes is a small accident by one developer in a package that you’re using, even if they’re using gpg signing to accidentally upload A package that’s been tampered. It stinks, but that’s the reality. What I think should be applauded is the thoroughness that the arch developers are going through the repo right now trying to find these packages. I don’t know the specifics, but if they’re like other open source developers, they’re unpaid people doing this out of their love for the software and community. and more than likely, this is a headache on top of headaches that they already have that they’re doing for the love of the community.

For those not from Illinois, there is a very loud (also small) contingent from outside of Chicago who like to complaint that the entire state isn’t Chicago. They are usually republican and are mostly subsidized by the people who live in chicago paying taxes. They are deeply republican, and there is nothing that he or anyone else could do to make them happy. (Biggest tip off here is that he resorts to name calling and fox news talking points)

Is Pritzker perfect, no. But on the politician scale, he’s one of the better ones…

Try telling that to someone who supported Bernie, but before you do that you might want to go back and refresh youself on what happened. The DNC is a diseased carcass, change isn’t possible.