1,081 karma · joined November 28, 2017
Have you heard of over-employment? There are people working 2-3 full-time jobs, pulling over $500k, while actually putting in only a few hours worth of work each week.
There are a ton more that are working one job, but likewise giving very little output. It's harder to catch those folks in the act when they don't physically have to be present in the office.
While in office can be less productive in a fair amount of aspects it can also be more so in others. It isn't always some sinister plan from above.
Labor costs have risen greatly post-lockdowns, so companies expect to see a return on their money, more so in a rapidly tightening labor market.
Discussing commits that the other author has since reverted, IFUNC change with Project Zero tests, a focus on embedded, etc.:
https://www.mail-archive.com/xz-devel@tukaani.org/msg00642.h...
Trimming security reporting details:
https://git.tukaani.org/?p=xz.git;a=commitdiff;h=af071ef7702...
The framework for deployment has vastly improved.
The POC is quite trivial for it:
user[email][]=valid@email.com&user[email][]=attacker@email.com
It was severe enough that paid customers got a heads up to be ready to patch.