From owner-freebsd-security@FreeBSD.ORG Wed Jun 29 21:37:27 2005 Return-Path: X-Original-To: freebsd-security@freebsd.org Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D57A516A41C; Wed, 29 Jun 2005 21:37:27 +0000 (GMT) (envelope-from scheidell@secnap.net) Received: from 0.mail.spammertrap.net (0.mail.spammertrap.net [204.89.241.173]) by mx1.FreeBSD.org (Postfix) with ESMTP id A55DB43D4C; Wed, 29 Jun 2005 21:37:27 +0000 (GMT) (envelope-from scheidell@secnap.net) Received: from localhost (localhost [127.0.0.1]) by 0.mail.spammertrap.net (Postfix) with ESMTP id 9819618F3BE; Wed, 29 Jun 2005 17:37:24 -0400 (EDT) Received: from secnap2.secnap.com (secnap2.secnap.com [204.89.241.128]) by 0.mail.spammertrap.net (Postfix) with ESMTP id BCF8218F3BC; Wed, 29 Jun 2005 17:37:16 -0400 (EDT) MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable X-MimeOLE: Produced By Microsoft Exchange V6.0.6603.0 Date: Wed, 29 Jun 2005 17:37:16 -0400 Message-ID: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Perl master site changed to tobez.org? Thread-Index: AcV87Z6NtUCzmccvRN+Qt5z7nRw24gABA1EQ From: "Michael Scheidell" To: X-Virus-Scanned: SpammerTrap(tm) SME-250 1.39 at spammertrap.net X-Spam-Status: No, hits=-7.451 tagged_above=-999 required=6.9 tests=[AWL=0.150, BAYES_00=-2.599, LOCAL_RCVD=-5, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] X-Spam-Level: Cc: tobez@freebsd.org Subject: Perl master site changed to tobez.org? X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Jun 2005 21:37:28 -0000 Tobez: no disrespect intended, obviously you saw a problem with the master sites for perl 5.8.7 and did what you could to help, and with your position as a maintainer, I know that the trust we have in you and your patches is well earned, so don't take this question as anything but my well-earned paranoia rearing its ugly head: Yes, building perl5.8.7 did seem like it had a lot of problems with the master_sites which is why I went to the freebsd ports cvs tree and looked to see if they fixed it, however, I believe it would be prudent for me to ask: How safe is this your site? And, yes, in some of my build scripts I pull the distfiles from our local system due to some issues with some of the sites, however, how safe is tobez.org from hacking? =20 (ok, so, how safe is OUR site from hacking) or anyone's for that matter, so please don't take this as a challenge. I have enough to do not to have to go rebuilding our servers. (from new Makefile for perl5.8) =20 MASTER_SITES=3D ${MASTER_SITE_PERL_CPAN} \ ${MASTER_SITE_LOCAL:S/$/:local/} \ =20 http://www.tobez.org/download/port-mirrors/lang/perl58/:local MASTER_SITE_SUBDIR=3D ../../src \ tobez/:local ./:local