Linux explores new way of authenticating developers and their code(zdnet.com)

31 pointsby CrankyBear5 माह पहले6 comments

Linux explores new way of authenticating developers and their code

https://www.zdnet.com/article/linux-kernel-maintainers-new-way-of-authenticating-developers-and-code/

6 comments

Corrado5 माह पहले

I really wish that Keybase would have taken off. I think it was a great balance between verification and ease of use. Again, Keybase didn't prevent someone from impersonating another, it just raised the cost. And sometimes that's enough.

daymanstep5 माह पहले

Sorry, but how would this have prevented the xz backdoor? The article seems to be insinuating that it would have, but I don't see how it could.

lozf5 माह पहले

> The article seems to be insinuating that it would have.

I disagree, the article clearly states:

      Montgomery and others were careful to say that Linux ID 
      will not magically prevent another xz‑style supply‑chain 
      attack, but they argue it materially raises the cost.

encrypted_bird5 माह पहले

xz backdoor? What's that?

lozf5 माह पहले

https://news.ycombinator.com/item?id=47166473

- the video is well worth a watch.

encrypted_bird5 माह पहले

Thanks, I'll give it a watch! <3