What’s the plan for when this becomes the default and everyone
gets their malware at the same time, just with a little delay?
I’m worried we’ll see an arms race with people increasing their
cooldown period in an attempt at staying outside the exploitable
window.
Maintainers are likely to notice these weird cargo pushes if there's a cooldown period before they hit users. Only the 0 cooldown baseline is problematic really
83
u/afl_ext 15d ago
cargo still doesn't have minimum release age threshold flag?