Post #775215

The worst thing about the linux ecosystem is nothing is signed if software was signed we could easily have a secure enclave. We could finally start building an ecosystem where malware running in a computer would have a much harder time stealing npm/github/pypi tokens, ssh keys, cleartext passwords in config files like we've seen a lot lately. It doesn't fix everything, but it'd help a lot. https://www.bleepingcomputer.com/news/security/popular-litellm-pypi-package-compromised-in-teampcp-supply-chain-attack/