Re: FreeBSD needs Git to ensure repo integrity [was: 2012 incident]

2012-11-20 Thread Mike Meyer
Zach Leslie xaque...@gmail.com wrote: http://www.fossil-scm.org/ l I'm not fossil user, but it's BSD licensed in written in C. Also, this particular tool bails out on the unix philosophy, with its web gui, ticket tracker etc. Do one thing. Do it well. I would argue that git bails on that

Re: FreeBSD needs Git to ensure repo integrity [was: 2012 incident]

2012-11-20 Thread Baptiste Daroussin
On Mon, Nov 19, 2012 at 07:08:13PM -0800, Zach Leslie wrote: http://www.fossil-scm.org/ I'm not fossil user, but it's BSD licensed in written in C. Baptise Daroussin probably could tell us more about fossil pro and cons. This misses one of of the main points raised in the original

Re: FreeBSD needs Git to ensure repo integrity [was: 2012 incident]

2012-11-19 Thread Volodymyr Kostyrko
19.11.2012 14:34, Ivan Voras wrote: On 17/11/2012 22:48, Chris Rees wrote: (and is GPL btw) Since we're discussing it, Mercurial is BSDL-ed, and apparently has proper crypto signing using GPG:

Re: FreeBSD needs Git to ensure repo integrity [was: 2012 incident]

2012-11-19 Thread Mehmet Erol Sanliturk
On Mon, Nov 19, 2012 at 4:34 AM, Ivan Voras ivo...@freebsd.org wrote: On 17/11/2012 22:48, Chris Rees wrote: (and is GPL btw) Since we're discussing it, Mercurial is BSDL-ed, and apparently has proper crypto signing using GPG:

Re: FreeBSD needs Git to ensure repo integrity [was: 2012 incident]

2012-11-19 Thread C. P. Ghost
On Mon, Nov 19, 2012 at 1:47 PM, Volodymyr Kostyrko c.kw...@gmail.com wrote: 19.11.2012 14:34, Ivan Voras wrote: On 17/11/2012 22:48, Chris Rees wrote: (and is GPL btw) Since we're discussing it, Mercurial is BSDL-ed, and apparently has proper crypto signing using GPG:

Re: FreeBSD needs Git to ensure repo integrity [was: 2012 incident]

2012-11-19 Thread Mehmet Erol Sanliturk
On Mon, Nov 19, 2012 at 5:10 AM, C. P. Ghost cpgh...@cordula.ws wrote: On Mon, Nov 19, 2012 at 1:47 PM, Volodymyr Kostyrko c.kw...@gmail.com wrote: 19.11.2012 14:34, Ivan Voras wrote: On 17/11/2012 22:48, Chris Rees wrote: (and is GPL btw) Since we're discussing it, Mercurial is

Re: FreeBSD needs Git to ensure repo integrity [was: 2012 incident]

2012-11-19 Thread Alexander Yerenkow
http://www.fossil-scm.org/ I'm not fossil user, but it's BSD licensed in written in C. Baptise Daroussin probably could tell us more about fossil pro and cons. -- Regards, Alexander Yerenkow ___ freebsd-questions@freebsd.org mailing list

Re: FreeBSD needs Git to ensure repo integrity [was: 2012 incident]

2012-11-19 Thread Zach Leslie
There's a git repository. It's public. You can look at what goes into the FreeBSD git clone to get your assurance that things aren't being snuck in. People are using it, right now. I've always been confused by this. Which source repo is the true source of truth? To obtain the FreeBSD source,

Re: FreeBSD needs Git to ensure repo integrity [was: 2012 incident]

2012-11-19 Thread Zach Leslie
http://www.fossil-scm.org/ I'm not fossil user, but it's BSD licensed in written in C. Baptise Daroussin probably could tell us more about fossil pro and cons. This misses one of of the main points raised in the original post. The proliferation of git as a revision control system. Also,

Re: FreeBSD needs Git to ensure repo integrity [was: 2012 incident]

2012-11-19 Thread Eitan Adler
On 19 November 2012 22:04, Zach Leslie xaque...@gmail.com wrote: I've always been confused by this. Which source repo is the true source of truth? This changed a few months ago when ports and doc switched. As of now: - SVN is *the* source of truth. - CVS is exported from svn. It will

Re: FreeBSD needs Git to ensure repo integrity [was: 2012 incident]

2012-11-18 Thread grarpamp
On Sun, Nov 18, 2012 at 1:57 AM, Garrett Wollman woll...@bimajority.org wrote: the various good uses for nyms. There are no such uses on the FreeBSD mailing-lists; if you wish for anyone to pay attention to you, then use a real name. Otherwise, FOAD. -GAWollman It appears you have not

Re: FreeBSD needs Git to ensure repo integrity [was: 2012 incident]

2012-11-18 Thread C. P. Ghost
On Sun, Nov 18, 2012 at 6:59 AM, grarpamp grarp...@gmail.com wrote: joerg_wun...@uriah.heep.sax.de You don't even have a name Your domain indicates Germany, please have a chat with CCC.de about the various good uses for nyms. And consult your library for some fine historical use cases. If

Re: FreeBSD needs Git to ensure repo integrity [was: 2012 incident]

2012-11-18 Thread grarpamp
grarpamp the various good uses for nyms. cpgh...@cordula.ws I hope you realize whom you're trying to lecture here! Joerg Wunsch is a highly appreciated long-time FreeBSD contributor Of course. No one here has any question as to anyone's FreeBSD participation. That would be silly :) I merely

Re: FreeBSD needs Git to ensure repo integrity [was: 2012 incident]

2012-11-18 Thread grarpamp
I won't fail to defend general anti-nym opinion or guidance d-oh, s/defend/defend against/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to

FreeBSD needs Git to ensure repo integrity [was: 2012 incident]

2012-11-17 Thread grarpamp
http://www.freebsd.org/news/2012-compromise.html http://it.slashdot.org/story/12/11/17/143219/freebsd-project-discloses-security-breach-via-stolen-ssh-key This is not about this incident, but about why major opensource projects need to be using a repository that has traceable, verifiable,

Re: FreeBSD needs Git to ensure repo integrity [was: 2012 incident]

2012-11-17 Thread grarpamp
joerg_wun...@uriah.heep.sax.de You don't even have a name Your domain indicates Germany, please have a chat with CCC.de about the various good uses for nyms. And consult your library for some fine historical use cases. If that's counter to your beliefs, you are free to show us the way and post

Re: FreeBSD needs Git to ensure repo integrity [was: 2012 incident]

2012-11-17 Thread Polytropon
On Sun, 18 Nov 2012 00:59:54 -0500, grarpamp wrote: Never trust an operating system you don't have sources for. ;-) As well summarized by this (your signature) ... sources you can't verify to the master are, also, sources you can't trust. Unless. of couse, you are able to use the source

Re: FreeBSD needs Git to ensure repo integrity [was: 2012 incident]

2012-11-17 Thread Bruce Cran
On 18/11/2012 05:21, Robert Simmons wrote: Yup: https://github.com/freebsd/ There's also git.freebsd.org. -- Bruce Cran ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send