Meanwhile...
Meanwhile...
Posted Apr 28, 2026 10:23 UTC (Tue) by taladar (subscriber, #68407)In reply to: Meanwhile... by rgmoore
Parent article: Dependency-cooldown discussions warm up
That is not really true for general supply chain attacks though. Only very targeted attacks need no time on the attacker's side. Broadly distributed ones still need the attacker to discover who actually used the code they backdoored and which of those targets are worth attacking further.
Meanwhile the comment you replied to is probably about all the security fixes whose rollout would also get delayed with this.