On Thu, Jun 12, 2014 at 11:56:18AM +0200, Marc Espie wrote: > The neat effect will be to speed up updates, by relegating unchanged files > to the end of the archive, so they don't need to be fetched at all.
It just occurred to me that the shuffle-stack change in gcc is going to make that optimisation completely worthless for binaries (well, there's already randomized other info in files, so that's that). Between the choice between better security and slightly faster updates, of course, better security is better, so I'm happy with that change. Just forewarning that it will make incremental updates slightly *less* effective.