Note: Due to technical difficulties, the Archives are currently not up to date.
GMANE provides an alternative service for most mailing lists. c.f. bug 424647
* will.richey@...:
> So, the determined attacker would have to control considerable more
> than one site.
No, only control of your sync mirror and only one changed ebuild is
needed to get full control of your server.
You can not distinguish if an ebuild is a real gentoo ebuild or a
faked one.
Hope you really trust your sync carrier.
--
.: Torsten Veller | Apathy is not the problem, it's the solution. :.
--
gentoo-security@g.o mailing list
|
|
