Editing Software Engineering (Fall 2025) (section)

== Sprint 3 == 

=== December 4 (Thursday) - Decomissioning, Handoffs, and Transitions ===
Case: The XZ vulnerability

'''Before Class'''
* Read [https://canvas.uw.edu/courses/1838606/files/folder/Weeks%2010%20and%2011?preview=142209300 Reading Note 17]
* Watch my [https://canvas.uw.edu/courses/1838606/files/folder/Weeks%2010%20and%2011?preview=142209222 mini-lecture on Decommissioning, Handoffs, and Transitions]
* Prepare Case Material
** Read [https://en.wikipedia.org/wiki/XZ_Utils_backdoor the Wikipedia account] of the xz vulnerability
** Read [https://robmensching.com/blog/posts/2024/03/30/a-microcosm-of-the-interactions-in-open-source-projects/ this post from Rob Mensching] pointing out a key 'step 0' for the xz incident
** Read [https://time.com/7005363/internet-postmortal-age-data/ Everyone on the Internet Will Die], by Carl Ohman
** Look around the [https://beyondthebusfactor.org/ Beyond the Bus Factor] site, which offers a guide to thinking through resilience in projects (plan to spend about 15 minutes looking through what the site includes)

'''Class Goals:'''
* Discuss Reading Note 17
* Standup
* Finish up sprint planning if you did not finish in the last class
* Discuss plans for the end of the project

'''Optional:'''
* This is a great presentation from Bogdan Vasilescu about [https://blog.communitydata.science/fossy-2024-wrap-up-bogdan-vasilescu-on-navigating-dependency-abandonment/ dependency abandonment]
* For alternatives to ending old projects, ''Kill it with Fire'' is a useful handbook for how to handle the modernization of legacy systems.
* This article from [https://thenewstack.io/malicious-code-in-linux-xz-libraries-endangers-ssh/ the New Stack] gives a RedHat-focused early analysis of the xz incident

=== December 9 (Tuesday) ===

No class meeting. However, this is the designated timeslot for the final exam for this class. I strongly recommend that you plan to co-work with your group during this time (Professor Champion will run an open lab during this period).

=== December 11 (Thursday) ===

[[#Bot Project Task #7|Bot Project Task 7]] (Final version of your bot) due at 11:59 p.m. Pacific time.

=== December 14 (Sunday) ===

Reflection Due