Sorry, but how would this have prevented the xz backdoor? The article seems to be insinuating that it would have, but I don't see how it could.
> The article seems to be insinuating that it would have.
I disagree, the article clearly states:
Montgomery and others were careful to say that Linux ID
will not magically prevent another xz‑style supply‑chain
attack, but they argue it materially raises the cost.xz backdoor? What's that?
https://news.ycombinator.com/item?id=47166473
- the video is well worth a watch.