From owner-freebsd-security@FreeBSD.ORG Sun Nov 18 10:44:45 2012 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 43FF2A6A; Sun, 18 Nov 2012 10:44:45 +0000 (UTC) (envelope-from lev@FreeBSD.org) Received: from onlyone.friendlyhosting.spb.ru (onlyone.friendlyhosting.spb.ru [IPv6:2a01:4f8:131:60a2::2]) by mx1.freebsd.org (Postfix) with ESMTP id C8A0E8FC0C; Sun, 18 Nov 2012 10:44:44 +0000 (UTC) Received: from lion.home.serebryakov.spb.ru (unknown [IPv6:2001:470:923f:1:cc83:142f:c735:4700]) (Authenticated sender: lev@serebryakov.spb.ru) by onlyone.friendlyhosting.spb.ru (Postfix) with ESMTPA id 19D234AC1C; Sun, 18 Nov 2012 14:44:43 +0400 (MSK) Date: Sun, 18 Nov 2012 14:44:41 +0400 From: Lev Serebryakov X-Priority: 3 (Normal) Message-ID: <583715708.20121118144441@serebryakov.spb.ru> To: Adrian Chadd Subject: Re: FreeBSD needs Git to ensure repo integrity [was: 2012 incident] In-Reply-To: References: MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Cc: freebsd-security@freebsd.org, freebsd-hackers@freebsd.org, freebsd-hubs@freebsd.org, grarpamp , freebsd-questions@freebsd.org X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Nov 2012 10:44:45 -0000 Hello, Adrian. You wrote 18 =D0=BD=D0=BE=D1=8F=D0=B1=D1=80=D1=8F 2012 =D0=B3., 8:55:54: AC> There's a git repository. It's public. You can look at what goes into AC> the FreeBSD git clone to get your assurance that things aren't being AC> snuck in. People are using it, right now. But commits in this repo aren't signed by developers../ --=20 // Black Lion AKA Lev Serebryakov