Meanwhile...
Meanwhile...
Posted Apr 27, 2026 16:22 UTC (Mon) by rgmoore (✭ supporter ✭, #75)In reply to: Meanwhile... by roc
Parent article: Dependency-cooldown discussions warm up
Note, though, that the original motivation for the delays was specifically about supply chain attacks, meaning deliberately introduced backdoors. The attacker in a supply chain attack doesn't need any time to figure out how to exploit it; if they need to wait any time it's for people to install the software so they have some targets. Deliberately introducing a delay is there to give the defenders, and the defenders' LLM, time to detect the backdoor before the attacker has a chance to exploit it.
The LWN site is currently under high scraper load, so comment display has been suppressed for anonymous users. If you are a human, you may read the comments by clicking the button below:
Note: you can avoid this step in the future by logging into your LWN account.
