alt.hn

2/27/2026 at 1:19:41 AM

Linux explores new way of authenticating developers and their code

 https://www.zdnet.com/article/linux-kernel-maintainers-new-way-of-authenticating-developers-and-code/

by CrankyBear

2/28/2026 at 9:05:16 AM

I really wish that Keybase would have taken off. I think it was a great balance between verification and ease of use. Again, Keybase didn't prevent someone from impersonating another, it just raised the cost. And sometimes that's enough.

by Corrado

2/27/2026 at 9:18:55 AM

Sorry, but how would this have prevented the xz backdoor? The article seems to be insinuating that it would have, but I don't see how it could.

by daymanstep

2/27/2026 at 3:09:52 PM

> The article seems to be insinuating that it would have.

I disagree, the article clearly states:

      Montgomery and others were careful to say that Linux ID 
      will not magically prevent another xz‑style supply‑chain 
      attack, but they argue it materially raises the cost.

by lozf

2/27/2026 at 10:57:12 AM

xz backdoor? What's that?

by encrypted_bird