News for hackers. Stuff that matters.
Re:Compromised PyTorch-nightly dependency chain December 30t... by jakear on Saturday December 31, 2022 @11:49PM (#34203698)
Engineer the act of querying a trusted party to be a paid operation and the problem is solved. It doesn’t really matter if the verification is subjective, you pay 5 people you trust, only accept it if 4 say it’s good, and stop paying the 5th if they consistently disagree and/or vouch for disagreeable content.

There are no comments on this comment yet.