Gentoo Archives: gentoo-dev

From: "Michał Górny" <mgorny@g.o>
To: Ciaran McCreesh <ciaran.mccreesh@××××××××××.com>
Cc: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] git security (SHA-1)
Date: Wed, 17 Sep 2014 20:23:53
Message-Id: 20140917222333.741a3d30@pomiot.lan
In Reply to: Re: [gentoo-dev] git security (SHA-1) by Ciaran McCreesh
1 Dnia 2014-09-17, o godz. 12:36:16
2 Ciaran McCreesh <ciaran.mccreesh@××××××××××.com> napisał(a):
3
4 > On Wed, 17 Sep 2014 07:21:08 -0400
5 > Tim Boudreau <niftiness@×××××.com> wrote:
6 > > If someone wants to commit malicious code into Gentoo, they're far
7 > > more likely to take the ugly but pragmatic approach of, say, forcing
8 > > someone to commit malicious code at gunpoint and then shooting them,
9 > > than to go to the vast effort it would take to come up with malicious
10 > > code that conveniently has the same SHA-1 hash as an existing commit.
11 >
12 > ...or getting themselves recruited. Even easier.
13
14 I'm sorry but we are not allowed to go offtopic discussing
15 the recruitment problems on this list.
16
17 --
18 Best regards,
19 Michał Górny

Attachments

File name MIME type
signature.asc application/pgp-signature