From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1JhO8p-0001wQ-Ni for garchives@archives.gentoo.org; Thu, 03 Apr 2008 12:02:03 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id D84A8E0A94; Thu, 3 Apr 2008 12:02:01 +0000 (UTC) Received: from hu-out-0506.google.com (hu-out-0506.google.com [72.14.214.225]) by pigeon.gentoo.org (Postfix) with ESMTP id 94888E0A94 for ; Thu, 3 Apr 2008 12:02:01 +0000 (UTC) Received: by hu-out-0506.google.com with SMTP id 23so1054600huc.1 for ; Thu, 03 Apr 2008 05:02:00 -0700 (PDT) Received: by 10.78.204.1 with SMTP id b1mr3849630hug.42.1207224120025; Thu, 03 Apr 2008 05:02:00 -0700 (PDT) Received: from snowcone ( [213.121.151.206]) by mx.google.com with ESMTPS id p25sm742847hub.29.2008.04.03.05.01.58 (version=TLSv1/SSLv3 cipher=OTHER); Thu, 03 Apr 2008 05:01:59 -0700 (PDT) Date: Thu, 3 Apr 2008 13:01:51 +0100 From: Ciaran McCreesh To: gentoo-dev@lists.gentoo.org Subject: Re: [gentoo-dev] Monthly Gentoo Council Reminder for April Message-ID: <20080403130151.12507f1a@snowcone> In-Reply-To: <47F4C60B.8080605@gentoo.org> References: <20080401092610.EEF7467349@smtp.gentoo.org> <47F3F098.1050508@gentoo.org> <47F3F860.6080200@gentoo.org> <47F3FA1C.7010407@gentoo.org> <47F4395A.3000509@gentoo.org> <47F4B9FC.2010907@gentoo.org> <47F4C0F8.7040906@gentoo.org> <20080403123921.3fc33a77@snowcone> <47F4C456.6080704@gentoo.org> <47F4C60B.8080605@gentoo.org> X-Mailer: Claws Mail 3.3.1 (GTK+ 2.12.9; x86_64-pc-linux-gnu) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org Mime-Version: 1.0 Content-Type: multipart/signed; boundary="Sig_/9MD=bhg4Vz/dBeM1r5M9/+P"; protocol="application/pgp-signature"; micalg=PGP-SHA1 X-Archives-Salt: b02c046f-a457-4ec0-a3d7-77c0b26bba09 X-Archives-Hash: 8c492855d6e86b05fa399ad055ad6d18 --Sig_/9MD=bhg4Vz/dBeM1r5M9/+P Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On Thu, 03 Apr 2008 12:56:59 +0100 Mike Auty wrote: > Petteri R=C3=A4ty wrote: > | Yeah, you only need access to one ebuild to do whatever you want to > | user's systems. >=20 > Perhaps then we should direct more of our efforts towards the GPG > package signing system, so that when a dev becomes a libability, their > keys can be revoked? Signing offers no protection against a malicious developer. --=20 Ciaran McCreesh --Sig_/9MD=bhg4Vz/dBeM1r5M9/+P Content-Type: application/pgp-signature; name=signature.asc Content-Disposition: attachment; filename=signature.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.7 (GNU/Linux) iD8DBQFH9Mcx96zL6DUtXhERAtx9AKDVBDSiJ/WptBDNICVY/qSJZjDLswCfcbw4 YWlvGhQPsg1LZ0Snz7D9DMs= =OUfs -----END PGP SIGNATURE----- --Sig_/9MD=bhg4Vz/dBeM1r5M9/+P-- -- gentoo-dev@lists.gentoo.org mailing list