[gentoo-security] Re: Trolling (was: Gentoo's security)

[Alexander Holler <holler@ahsoftware.de>]

Jason Stubbs wrote:
> On Monday 08 November 2004 11:02, Alexander Holler wrote:
...
> It really seems to me like you are trolling. The first email you sent was done 
> so after getting frustrated with Mike Frysinger's (vapier) closing of the 
> "versioned eclasses" bug. Yet, what you are talking about here is absolutely 
> nothing to do with that. You made most of the same statements on the bug, but 
> they were off-topic in that bug's context as well. Furthermore, there is 
> already another bug open for that off-topicness.

Yes I'm trolling and I doesn't take care about opening and writing tons 
of bugs if they got ignored or closed as worksforme/wontfix. I've 
written enough bugs and somewhere came to the point that written bugs is 
a useless spend of time.

In the bug I mentioned in my second post, I explain that the trojan for 
ebuilds is also usable on eclasses (which I've missed because they where 
relativly new and I've never used them). Ok, unrelated according to you.

And the second post, I also have reminder on the first post, where the 
first bug is mentioned where I explain how a list with hashes would 
help. Ok, very complicated and unrelated too.

> So, let me give you an account of where I see things are at:
> * SHA1 support is in portage but can't be enabled yet due to compatibility 
>   issues. That is, enabling it will prevent user's running <portage-2.0.51 
>   from being able to upgrade.

I still don't understand why just building a list with hashes (maybe 
signed) takes over 2 years.

> * Ebuild signing support is in portage and is starting to be adopted. 
>   Presently, there is a push for developer education.
> * CVS portage now runs most ebuild phases as the portage user rather than 
>   root and work is being done to support the last few as well.
> * Eclass, package and profile signing are all currently being worked on (and 
>   had begun before you started trolling)

You don't have to repeat that "trolling'. I think everyone has 
understood where gentoo is going too. emerge moo!

> The thing you seem to keep coming back to is why it hasn't already been 
> completed. You've been given the answer to that several times - lack of time 
> and higher priority issues. What I really would like to know is why you are 

Things like FEATURES="candy"?

> trying to tie up so much more of the time of the people that you would have 
> implement support for these critical features with these pointless emails?

Yes I'm totally pointless. It is unbelievable, but I'm too thinking that 
eclasses are totally breaking the ebuild-versioning scheme. I'm so 
pointless, I can't explain why.

Sorry, but as a troll I am, I'm now really leaving this list alone. I 
have to troll.

Trolling,

Alexander

--
gentoo-security@gentoo.org mailing list