Re: kernel.org compromised

2011-09-03 Thread Joerg Jaspert
Yeah, yeah. We've beaten that horse to death, and our side lost. I also advocate that all debs should be signed, but that was not the will of the ftp-masters the last time the issue was up for discussion. Thats wrong. Since 03 Aug 2008 at least. See

Re: kernel.org compromised

2011-09-03 Thread Andreas Barth
* Joerg Jaspert (jo...@debian.org) [110903 12:44]: Yeah, yeah. We've beaten that horse to death, and our side lost. I also advocate that all debs should be signed, but that was not the will of the ftp-masters the last time the issue was up for discussion. Thats wrong. Since 03 Aug

Re: kernel.org compromised

2011-09-02 Thread Bastian Blank
On Thu, Sep 01, 2011 at 06:05:01PM -0300, Henrique de Moraes Holschuh wrote: Our kernels are not a problem. The Debian mirror in mirrors.kernel.org, on the other hand... While the apt signature will protect users downloading packages through the package manager, users that get binary

Re: kernel.org compromised

2011-09-02 Thread Henrique de Moraes Holschuh
On Fri, 02 Sep 2011, Bastian Blank wrote: On Thu, Sep 01, 2011 at 06:05:01PM -0300, Henrique de Moraes Holschuh wrote: Our kernels are not a problem. The Debian mirror in mirrors.kernel.org, on the other hand... While the apt signature will protect users downloading packages through the

Re: kernel.org compromised

2011-09-02 Thread Philipp Kern
On 2011-09-02, Henrique de Moraes Holschuh h...@debian.org wrote: On Fri, 02 Sep 2011, Bastian Blank wrote: On Thu, Sep 01, 2011 at 06:05:01PM -0300, Henrique de Moraes Holschuh wrote: Our kernels are not a problem. The Debian mirror in mirrors.kernel.org, on the other hand... While the

Re: kernel.org compromised

2011-09-02 Thread Henrique de Moraes Holschuh
On Fri, 02 Sep 2011, Philipp Kern wrote: On 2011-09-02, Henrique de Moraes Holschuh h...@debian.org wrote: On Fri, 02 Sep 2011, Bastian Blank wrote: On Thu, Sep 01, 2011 at 06:05:01PM -0300, Henrique de Moraes Holschuh wrote: Our kernels are not a problem. The Debian mirror in

kernel.org compromised

2011-09-01 Thread Christoph Anton Mitterer
Hi. CCing this to d-d, as it's perhaps of more general interest: There was apparently a security break in on kernel.org https://www.kernel.org/#news Any knowledge how far Debian's kernels and sources are concerned by this? Do you guys take them from git, or from the kernel.org tar balls. How

Re: kernel.org compromised

2011-09-01 Thread Ben Hutchings
On Thu, Sep 01, 2011 at 11:56:27AM +, Christoph Anton Mitterer wrote: Hi. CCing this to d-d, as it's perhaps of more general interest: There was apparently a security break in on kernel.org https://www.kernel.org/#news I am well aware of this as a kernel.org user. Any knowledge how

Re: kernel.org compromised

2011-09-01 Thread Christoph Anton Mitterer
On Thu, 1 Sep 2011 16:03:52 +0100, Ben Hutchings b...@decadent.org.uk wrote: There was apparently a security break in on kernel.org https://www.kernel.org/#news I am well aware of this as a kernel.org user. Is suspected this ;) ... Any knowledge how far Debian's kernels and sources are

Re: kernel.org compromised

2011-09-01 Thread Henrique de Moraes Holschuh
(debian-kernel dropped from CC, since our kernels have already been reported to be safe elsewhere in the thread). On Thu, 01 Sep 2011, Christoph Anton Mitterer wrote: Any knowledge how far Debian's kernels and sources are concerned by this? Do you guys take them from git, or from the kernel.org