News for hackers. Stuff that matters.
Re:Compromised PyTorch-nightly dependency chain December 30t... by dane-pgp on Saturday December 31, 2022 @10:22PM (#34203255)
> a trusted party reviewing code & posting content integrity hashes

That sounds like some combination of Crev[0], Sigstore[1], and Trillian[2].

[0] https://github.com/crev-dev/cargo-crev/blob/master/cargo-cre...

[1] https://docs.sigstore.dev/

[2] https://transparency.dev/

There are no comments on this comment yet.