Verify the identity of developers

Posted Mar 30, 2024 9:28 UTC (Sat) by pabs (subscriber, #43278)
In reply to: Verify the identity of developers by immibis
Parent article: A backdoor in xz

There are non-SMS forms of 2FA allowed, TOTP for example, which anyone can do without any identity checks using just software.