RT @rossjanderson: The Trojan Source vulnerability allows supply-chain attacks on software written in C, C++, Go, Java, Javascript, Python…