News for hackers. Stuff that matters.

A comment on Open Source Security at Astral. Parent comment

Re:Open Source Security at Astral by charcircuit on Thursday April 09, 2026 @08:17AM (#47702708)
>Why is it a bunch of mostly unpaid volunteer hackers are putting more effort into supply chain security than OpenAI.

To be frank. Because more effort doesn't actually mean that something is more secure. Just because you check extra things or take extra steps that doesn't mean it actually results in tangibly better security.

[ Parent | on HN ]
Re:Open Source Security at Astral by MeetingsBrowser on Thursday April 09, 2026 @09:16AM (#47703345)
Exactly. Deterministic artifacts alone are not necessarily more secure and are tangential to a lot of what is being described in the blog post.

The blog is mostly focused on hardening the CI/CD pipeline.

[ Parent | on HN ]