Post #1074209
2026-04-06 19:36 UTC
@filippo Couldn't agree more with "the bet is 'are you 100% sure a CRQC will NOT exist in 2030?'" — and I'd also add the operational perspective: "are you 100% sure you've found and replaced every Debian oldoldstable and RHEL 8 box that doesn't support PQC by 2030?"
Replies (2)
-
@filippo@abyssdomain.expert 2026-04-06 19:44
@neverpanic oh Debian oldstable is not gonna make it. stable might not make it! I have a secret, over-optimistic wish that this will kill the "constantly run software 3-5 years out of date" model of distribution, and free us upstreams from having to deal with its fallout, but I know it won't.
-
@BRicker@fosstodon.org 2026-04-06 23:22
@neverpanic @filippo We inventoried _everything_ once for Y2K and once for DST 2007 🇺🇸 , at least here. We _can_ and _will_ do it again. (Doing it for both CRQC and Y2038 simultaneously would be a cost-savings.) (If you can't make a 100% inventory, ask your Red Team or contact a gray-hat hacker, see if they'll take $ for becoming white-hat red-vest on Red Team.)