logoalt Hacker News

LdBaringSwallow • today at 5:40 PM • 1 reply • view on HN

> https://blog.pypi.org/posts/2024-11-14-pypi-now-supports-dig...

Thought we already learned years ago an IP address is not a person?

That is to say; what the screen on my end communicates is not guaranteed to be representative of ground truth.

The IT world was recently making fun of Sam Altman's eye scanner because remote attestation can be faked.

All the layers of abstraction wrapped around the code is security through obscurity.

The code itself must still be verified as safe.

The cloud era has resulted in a lot of people operating at layers of abstraction so far removed from physics this shit has more in common with baseless dogmas, gospels, and spiritualities at this point.

We anthropomorphized the cloud inserting ourselves into it. It's just a bunch of networked computers.

All this stuff is a spoon that doesn't exist.


Replies

bonoboTP • today at 6:04 PM

You're speaking in such shorthand that I have no idea how to untangle what you're actually trying to say/propose. I suppose you're saying that attested code can still be malware because malicious actors can also go through the attestation process?

➕ show 1 reply