The Worm in the Registry

On supply chain attacks, the cost of trust, and why free software is not the same as safe software