Read full article
「圍繞整肅行動的公開語言並未提供太多有關內部實際情況的細節，從中無法確定究竟是貪腐、政治鬥爭、純粹的清洗，或是其他原因。」新加坡國立大學的莊嘉穎教授說。
，详情可参考Safew下载
Montgomery and others were careful to say that Linux ID will not magically prevent another xz‑style supply‑chain attack, but they argue it materially raises the cost. Instead of a single PGP key and a handful of signatures, an attacker would need to accumulate and maintain multiple, short‑lived credentials from issuers that can revoke them and from community members whose own reputations are in play, all while their activity is streamed into public or semi‑public transparency logs.
Detection is via allocating a slice of zeroed memory, in our case a gigabyte, and then once per minute going through to ensure they're actually all zeroes. Magic!