News for hackers. Stuff that matters.
Re:Minibone: practical end-to-end encryption for web apps by nextaccountic on Monday April 08, 2024 @09:44PM (#39975566)
It's the contrary. It's only because we can identify Jia Tan's contributions that we can throw out just his contributions and revert to (say) xz 3.2

If xz contributors were anonymous, we would need to throw out the whole thing

Re:Minibone: practical end-to-end encryption for web apps by codetrotter on Tuesday April 09, 2024 @08:12PM (#39985645)
If the Minibone repo turns out to be malicious I don’t think it makes much of a difference whether they are committing as one anonymous user, or as 12 fake people.
Re:Minibone: practical end-to-end encryption for web apps by nextaccountic on Tuesday April 09, 2024 @11:17PM (#39986633)
Tracking the fake people still give some information (for example, the more sock puppets, the harder it is to simulate discussions in issues, PRs, etc)