News for hackers. Stuff that matters.

A comment on Minibone: practical end-to-end encryption for web apps. Parent comment

Re:Minibone: practical end-to-end encryption for web apps by codetrotter on Monday April 08, 2024 @08:57PM (#39975318)
> zero transparency

> could be a state actor trying to lay the foundation for future backdoors

idk if presence of “names” are a good signal to indicate otherwise either

https://www.wired.com/story/jia-tan-xz-backdoor/

[ Parent | on HN ]
Re:Minibone: practical end-to-end encryption for web apps by nextaccountic on Monday April 08, 2024 @09:44PM (#39975566)
It's the contrary. It's only because we can identify Jia Tan's contributions that we can throw out just his contributions and revert to (say) xz 3.2

If xz contributors were anonymous, we would need to throw out the whole thing

[ Parent | on HN ]
Re:Minibone: practical end-to-end encryption for web apps by codetrotter on Tuesday April 09, 2024 @08:12PM (#39985645)
If the Minibone repo turns out to be malicious I don’t think it makes much of a difference whether they are committing as one anonymous user, or as 12 fake people.
[ Parent | on HN ]
Re:Minibone: practical end-to-end encryption for web apps by nextaccountic on Tuesday April 09, 2024 @11:17PM (#39986633)
Tracking the fake people still give some information (for example, the more sock puppets, the harder it is to simulate discussions in issues, PRs, etc)
[ Parent | on HN ]