On Sun, May 12, 2013 at 9:51 PM, Paul Gilmartin <[email protected]> wrote: > On Sun, 12 May 2013 18:55:05 -0500, J. Leslie Turriff wrote: > >> Sorry; I should have marked that Off-Topic. >> This is an interesting exposition on the subject. I suppose that this >> is >>unavoidable in any business that produces large software systems. >> >> http://blog.zorinaq.com/?e=74 >> > I have a question on a technique. How does publishing a SHA-1 > checksum of a system file authenticate the author as having > access to the source code? But he probably knows what he's > doing, and I'm relatively naive: > > http://xkcd.com/1181/ > > ... looks fine to me. > > -- gil > What, no key signing party? http://www.phildev.net/pgp/gpgsigning.html -- Mike A Schwab, Springfield IL USA Where do Forest Rangers go to get away from it all?
---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
