Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 02 Jan 2021 19:43:13 +0000
From:      "Poul-Henning Kamp" <phk@phk.freebsd.dk>
To:        grarpamp <grarpamp@gmail.com>
Cc:        freebsd-current@freebsd.org
Subject:   Re: HEADS UP: FreeBSD src repo transitioning to git this weekend
Message-ID:  <66834.1609616593@critter.freebsd.dk>
In-Reply-To: <CAD2Ti2-9gsLXv0DqbBfn6K=Ded%2BMy1grYpwV3EAKf8mW_V=baA@mail.gmail.com>
References:  <20201223162417.v7Ce6%steffen@sdaoden.eu> <20201229011939.GU31099@funkthat.com> <20201229210454.Lh4y_%steffen@sdaoden.eu> <20201230004620.GB31099@funkthat.com> <CAD2Ti2-4xS5n0%2B1oLOHyFh4%2BOCnwtNAAwMkkWzwRVDnt-xmb1Q@mail.gmail.com> <20201231193908.GC31099@funkthat.com> <CAD2Ti2-dKMOx2-k71UyZs1kAGCXPuVwO9ee861oRFNV=aCfuqA@mail.gmail.com> <20210101140857.x3hbci6c4nwi7gl7@mutt-hbsd> <slrnruv17k.rlr.naddy@lorvorc.mips.inka.de> <CAKBkRUy_MJDpROVbX=MhvHvdBJTEaYU83cHMHaqsEDcLX4KKRw@mail.gmail.com> <20210102021254.35o3snqb5fcvmbt3@mutt-hbsd> <60082.1609572957@critter.freebsd.dk> <CAD2Ti2-9gsLXv0DqbBfn6K=Ded%2BMy1grYpwV3EAKf8mW_V=baA@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
--------
grarpamp writes:

> > No amount of cryptography can or will protect against that.
>
> Though it can help attribute that to a source,

No.

You would end up with the committer saying "it came in as a bug-report,
I looked at it, and it looked sensible so I committed it."

Unless you are going to *enforce* (how?!) that all committers only
commit patches they received under full cryptographic & biometric
custody from verified communications partners, it will always end
up being unattributable.

Even if you were able to pin the blame on a particular committer,
that person would simply cease to exist, because it was only a cover
identity to begin with.

> > As interesting as this thread has been (not!)
>
> Contrare.
> [...]
> Defense in depth.

... is a lot harder than most IT-people realize, because most
IT-people almost invariably ignore the entire human and political
aspect of the problem.

See also:  "Operation Orchestra" by yours truly.

-- 
Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
phk@FreeBSD.ORG         | TCP/IP since RFC 956
FreeBSD committer       | BSD since 4.3-tahoe    
Never attribute to malice what can adequately be explained by incompetence.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?66834.1609616593>