Git signing would not have helped here. In fact, the tags and release archives *... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

account42 on April 4, 2024 | parent | context | favorite | on: Backdoor in upstream xz/liblzma leading to SSH ser...

Git signing would not have helped here. In fact, the tags and release archives were signed.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact