>On 5 Nov 2014, at 20:25, Theo de Raadt wrote: >> >> How do we find people on the internet who care, and knit them into a >> community, and then somewhere down the road meet them and have them >> become this so-called 'core developer' group? >> >> We start reading code from them. > >The code, yes, the code. > >Nothing to stop anyone from being suspicious for any reason whatsoever >and giving some code some extra review. So much the better.
Yes, so much the better, but in all circumstances, no matter what. There is nothing stopping Mr. Istom from suspending his suspicions -- oh let's call them accusations for that is what they are -- and reading the code, performing that review as well. Never expect a group to perform a task which an individual won't.
