5 ms·
Linux explores new way of authenticating developers and their code
- daymanstep 8mo agoSorry, but how would this have prevented the xz backdoor? The article seems to be insinuating that it would have, but I don't see how it could.
- encrypted_bird 8mo agoxz backdoor? What's that?
- lozf 8mo agohttps://news.ycombinator.com/item?id=47166473 https://news.ycombinator.com/item?id=47166473 - the video is well worth a watch.
- encrypted_bird 8mo agoThanks, I'll give it a watch! <3
- lozf 8mo ago> The article seems to be insinuating that it would have. I disagree, the article clearly states: Montgomery and others were careful to say that Linux ID will not magically prevent another xz‑style supply‑chain attack, but they argue it materially raises the cost.
- Corrado 8mo agoI really wish that Keybase would have taken off. I think it was a great balance between verification and ease of use. Again, Keybase didn't prevent someone from impersonating another, it just raised the cost. And sometimes that's enough.