From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 49688138A1A for ; Tue, 17 Feb 2015 09:07:50 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 35149E0960; Tue, 17 Feb 2015 09:07:49 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id A3A1CE0955 for ; Tue, 17 Feb 2015 09:07:48 +0000 (UTC) Received: from grubbs.orbis-terrarum.net (localhost [127.0.0.1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 7F7F334085A for ; Tue, 17 Feb 2015 09:07:47 +0000 (UTC) Received: (qmail 28782 invoked by uid 10000); 17 Feb 2015 09:07:32 -0000 Date: Tue, 17 Feb 2015 09:07:32 +0000 From: "Robin H. Johnson" To: gentoo-project@lists.gentoo.org Subject: Re: [gentoo-project] Gentoo, GitHub, and the Social Contract Message-ID: References: <20150214221352.3c52aa6f@googlemail.com> <54DFCAF4.8090306@gentoo.org> <20150214223148.0aa094da@googlemail.com> <20150215013540.e861fb20ebcbea7b49b2ec19@gentoo.org> <20150214224054.16de1017@googlemail.com> <54DFD5FD.4010401@sporkbox.us> <20150214231553.7a8b1d2e@googlemail.com> <20150215160358.351879785830bfd5fdaff3bd@gentoo.org> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Project discussion list X-BeenThere: gentoo-project@lists.gentoo.org Reply-To: gentoo-project@lists.gentoo.org MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.21 (2010-09-15) X-Archives-Salt: 925aa771-d389-4b14-b05e-040b89cdab1c X-Archives-Hash: bc09774a3caf5fee609053544f996756 On Sun, Feb 15, 2015 at 06:43:28PM +0100, Alexey Lapitsky wrote: > on-call rotation Sure, Infra will happily take full-time employment if you're going to pay reasonable salaries for it. Gentoo Foundation doesn't have even remotely the budget for it. > * 2 factor authentication which could be enforced Do you REALLY want 2FA for Git? I'll deploy this [1] when I resolve our present sponsor holdups with the new Git server. [1] https://github.com/mricon/totp-cgi/blob/master/contrib/gitolite/README.rst > * bug bounty program Will you fund it? Then sure! -- Robin Hugh Johnson Gentoo Linux: Developer, Infrastructure Lead E-Mail : robbat2@gentoo.org GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85