I suppose you'd register your keys when signing up and to change them, you'd hav...

a022311 11 months ago | parent | context | favorite | on: NPM debug and chalk packages compromised

I suppose you'd register your keys when signing up and to change them, you'd have some recovery passphrase, kind of like how 2FA recovery codes work. If somebody can phish _that_, congratulations.