The OpenSSH backdoor demonstrates that the community must get pragmatic about package verification, and fast.
Privacy StatementCopyright 2006, SecurityFocus