4 ms·
S3C2 Summit 2025-09: Industry Secure Supply Chain Summit
- jruohonen 5mo agoAnd the accompanying: https://arxiv.org/abs/2605.29140 https://arxiv.org/abs/2605.29140 Some good takes on new (and old) ideas to consider. I don't know what should or could be done, but maybe people will revert back to using only distribution-shipped packages. There was a good argument from Ubuntu people about this a while back: https://news.ycombinator.com/item?id=47585172 https://news.ycombinator.com/item?id=47585172