From owner-freebsd-stable@FreeBSD.ORG  Sun Nov 18 09:49:33 2012
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
 by hub.freebsd.org (Postfix) with ESMTP id E1275559
 for <freebsd-stable@freebsd.org>; Sun, 18 Nov 2012 09:49:33 +0000 (UTC)
 (envelope-from ml@netfence.it)
Received: from smtp.eutelia.it (mp1-smtp-5.eutelia.it [62.94.10.165])
 by mx1.freebsd.org (Postfix) with ESMTP id 81C928FC08
 for <freebsd-stable@freebsd.org>; Sun, 18 Nov 2012 09:49:32 +0000 (UTC)
Received: from ns2.biolchim.it (ip-188-188.sn2.eutelia.it [83.211.188.188])
 (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by smtp.eutelia.it (Eutelia) with ESMTP id AF3EB14A554
 for <freebsd-stable@freebsd.org>; Sun, 18 Nov 2012 10:49:30 +0100 (CET)
Received: from soth.ventu (adsl-ull-234-152.41-151.net24.it [151.41.152.234])
 (authenticated bits=0)
 by ns2.biolchim.it (8.14.5/8.14.5) with ESMTP id qAI9nQHS009013
 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL)
 for <freebsd-stable@freebsd.org>; Sun, 18 Nov 2012 10:49:27 +0100 (CET)
 (envelope-from ml@netfence.it)
Received: from alamar.ventu (alamar.ventu [10.1.2.18])
 by soth.ventu (8.14.5/8.14.5) with ESMTP id qAI9nHqU073328;
 Sun, 18 Nov 2012 10:49:17 +0100 (CET) (envelope-from ml@netfence.it)
Message-ID: <50A8AF1D.7080008@netfence.it>
Date: Sun, 18 Nov 2012 10:49:17 +0100
From: Andrea Venturoli <ml@netfence.it>
User-Agent: Mozilla/5.0 (X11; FreeBSD i386;
 rv:16.0) Gecko/20121030 Thunderbird/16.0.2
MIME-Version: 1.0
To: Kevin Oberman <kob6558@gmail.com>
Subject: Re: confirm that csup is still usable fos the new 9.1
References: <CALFgp2PGLnqUeDkt=hn_B6yjE9VrsXogrB9pFC6A=ahTCZvRRA@mail.gmail.com>
 <CAF6rxg=udvqV_dAGeH-zGq_gWfKja=YpXwyMBtBHahFHBxAJnQ@mail.gmail.com>
 <50A7DEE7.8090802@netfence.it>
 <CAN6yY1tLe1XRM+MFiDj=XOx3dagx8OammSCYfvM+sP2Xjg431g@mail.gmail.com>
In-Reply-To: <CAN6yY1tLe1XRM+MFiDj=XOx3dagx8OammSCYfvM+sP2Xjg431g@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Scanned-By: MIMEDefang 2.73
X-Scanned-By: MIMEDefang 2.73 on 10.1.2.13
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.2.7
 (ns2.biolchim.it [192.168.2.203]); Sun, 18 Nov 2012 10:49:27 +0100 (CET)
Cc: freebsd-stable@freebsd.org
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-stable>,
 <mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
 <mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 18 Nov 2012 09:49:33 -0000

On 11/17/12 21:04, Kevin Oberman wrote:

>> Looks like everything is back up again.
>> Thanks for the good work.
>
> Yes, but don't bet that csup and cvs will be around long.

I'm aware of this and I'm (adimttedly slowly) moving away from csup.



> The outage
> was the result of an intrusion into core FreeBSD systems. Please read
> the posting at http://www.freebsd.org/news/2012-compromise.html.

Read that.



> It's
> really time to get away from CVS and I suspect it will be going away
> sooner than had been planned. I notice that no response has confirmed
> whether it will be available for 9.1, probably because the security
> team is still evaluating the situation.

Simply out of curiosity, I wonder why csup/cvsup/cvs are less secure 
than alternatives, say SVN.
Why would this compromise be impossible without cvs?
Any link on this?


  bye & Thanks
	av.