Rendered at 07:33:53 GMT+0000 (Coordinated Universal Time) with Cloudflare Workers.
noman-land 3 hours ago [-]
If the signing subkey was committed, that implies developers have it as a file on their system which I find surprising if true. They should be using hardware like a Yubikey or something. Especially for something this important.
anon7000 3 hours ago [-]
The signing key for Firefox stored on a single hardware yubikey available to a single person?
pamcake 1 hours ago [-]
Could be multiple individuals, each with a different key.
People don't need an extra supply-chain failure mode to consider, and CVE proved these dongles are mostly security theater. Likewise, the recent Coinkite user key prediction breach certainly wasn't cool for folks that lost their holdings. =3
Antirust3743 2 hours ago [-]
Wrong cve and a side channel attack doesn't mean these dongles are useless. It would have stopped the firefox team's ai from commiting their subkey ;)
eptcyka 1 hours ago [-]
Storing the secret on a hardware token will most certainly help with not committing into source control.
Joel_Mckay 1 hours ago [-]
Most use another build host siloed from the dev staging area, regression tested/audited, and with limited administrative access. =3
eptcyka 12 minutes ago [-]
Ye, and how do you get source code from devs into that silo?
perching_aix 36 minutes ago [-]
> these dongles are mostly security theater
...as opposed to? What's your criteria for "non-security-theater"?
Joel_Mckay 10 minutes ago [-]
Siloed functional regression test verification, structural audits, and package signing.
Probably would conclude dev staging areas can't run continuous integration with the current design team. Asking them to take on additional tasks while they already are YOLO'ing it with an LLM is a suckers bet. =3
https://eprint.iacr.org/2020/540
https://en.wikipedia.org/wiki/Shamir%27s_Secret_Sharing
...as opposed to? What's your criteria for "non-security-theater"?
Probably would conclude dev staging areas can't run continuous integration with the current design team. Asking them to take on additional tasks while they already are YOLO'ing it with an LLM is a suckers bet. =3