On: Compromised PyTorch-nightly dependency chain between December 25th – December 30

[yjftsjthsd-h]

Encrypting keys with a passphrase would also help.

[jacquesm → yjftsjthsd-h]

Yes, but once an attacker has root on your systems they may well install something that captures that passphrase so a chunk of hardware that you have with you would seem to offer some extra protection.