Re: [gentoo-dev] Spam on gentoo-security mailing list

[Moritz Schulte]

"Dave Mertens" <dmertens@×××.nl> writes:

> What has SPAM todo with security?!

Eh, isn't it part of the definition of SPAM, that it does not have any
context?

> We're testing currently the gentoo distro if it can be used in a
> production environment. Within that test is also included the
> quality of the mailinglists of the maintainer of the distro, in this
> case Gentoo.

I have my doubts about mailinglists being a good way to judge the
quality of a project.

> They reflect on each other. Gentoo has setup a mailinglist where
> it's possible to send SPAM to, this only because the list is not
> moderated.

So, in your opinion all lists should be moderated?  Spam is annoying,
of course, but making all lists moderated is not a solution in my
opinion, because it makes communication also more complicated in a
way.  Look at (open) mailinglists as some kind of technical mechanism.
Not more.  It is the then users job to read what he wants to read and
to skip what he wants to skip.  He can install filters on his
computer, if he wants to.

> Mailinglist are easy stuff. And because the security of the
> mailinglist is not that good, so why should the distro than even
> have better security policy?

"The security of the mailinglist is not good" does not make much
sense; I cannot see any security leak, because the list worked as
expected.  Or can you see a security leak?

> The gentoo maintainers have to decide whether a post is qualified to
> be posted to a list.

I disagree.

> And what if i announce on the security list that Gentoo has a
> enormous security bug in it's portage system, while it's not true.

There should be way to proove wether such a posting is a fake or not -
for instance via signatures.

		moritz
-- 
moritz@×××××××××××××××.de - http://duesseldorf.ccc.de/~moritz/
GPG fingerprint = 3A14 3923 15BE FD57 FC06  B501 0841 2D7B 6F98 4199