Wow that must be a lot of work
Wow I feel for you, friend
Yea id be happy to help out from time to time.
--- But needs to happen with other things.
Quite often seen in GitHub where an attacker can contribute to build trust. With Reddit, mini modding, regular submissions, good comments etc
Defense includes not being shamed or pressured when life seems more important.
Just the quotes:
https://news.ycombinator.com/item?id=39909905
Very long page but a lot more in depth. Search for “Jigar Kumar pressured Lasse Collin”
https://securelist.com/xz-backdoor-story-part-2-social-engin...
And an overview:
Its worth any maintainer to be familiar with these methods to build up defences. With a few sock puppet accounts a single person could do it on their spare time. A nation state or criminal full time enterprise could do several attacks.
It's scary and immoral but I find it fascinating too. Like the dark side of the how to win friends books.
Security.
It's definitely never mentioned on reddit because simply saying one of the websites in an offhand comment gets you a sitewide ban and your comment deleted.