hairyfeet writes: "The paper submitted here along with the original PDF says these researchers have found a way to take over a repository without needing the private key. Is this a serious risk, or just more FUD?"
"In the face of entropy and nothingness, you kind of have to pretend it's not
there if you want to keep writing good code." -- Karl Lehenbauer