Verify the identity of developers

Posted Apr 1, 2024 15:31 UTC (Mon) by Lennie (subscriber, #49641)
In reply to: Verify the identity of developers by marcH
Parent article: A backdoor in xz

For context, I'll post you a link to a talk by a brave man:

Resisting the state if they come knocking is euh... hard work to say the least.

Formally good actors can (be made to) turn or get their systems compromised.

Which is why we need to focus on checking code and making code more readable probably less focus less on the actors.