My reply did not exhibit a lack of understanding of this mechanism. It instead q...

plopilop · 2026-10-02T12:45:02

Sure, but here I guess the main idea is that everything is linked, especially how libraries package managers work nowadays.

In order to compromise the big player, you only have to compromise the weakest link in its supply chain. In effect that means that leaving the migration optional is as useless as doing nothing.

LeFantome · 2026-10-02T15:30:14

This is the whole concept of Defense in Depth.

hypfer · 2026-10-02T13:32:16

Let me put it differently:

It is not of my concern to live in ways that are harder for me, just so that big tech can have it easier.

plopilop · 2026-10-02T14:26:24

Big tech being compromised will also make your life harder. The opposition small/big players is not as clear cut as one would like.

hypfer · 2026-10-02T15:43:59

Sure, buddy. Let's just not question anything at all. Move along, don't cause friction.

Jesus man.

doc_ick · 2026-10-02T20:57:10

It does make sense to set sha256 as the default. I would like even strong to future proof things a bit, but sha256 is a good upgrade.

Dylan16807 · 2026-10-03T00:36:27

Yeah that argument you completely imagined and nobody implied is ridiculous!