Respository vandalism by root at ...fd.o

Matthias Hopf mhopf at suse.de
Wed Nov 24 11:07:05 PST 2010


On Nov 23, 10 22:56:52 +0000, Alan Cox wrote:
> > It's on a separate branch, not master.   (Doesn't mean it's right, just
> > that it's not actually going to cripple anything or waste time for anyone
> > who doesn't ask for it.)
> 
> And how many other un-noticed commits did this person make ? Until you
> know that you have to assume a complete compromise.

Luckily, git makes this difficult. At least as long as git histories are
repeatedly checked (which they are for the main trees), a git fsck
should find any inconsistencies, and you should get broken
fast-forwards.

Not that this makes the fraud any better.

Matthias

-- 
Matthias Hopf <mhopf at suse.de>      __        __   __
Maxfeldstr. 5 / 90409 Nuernberg   (_   | |  (_   |__          mat at mshopf.de
Phone +49-911-74053-715           __)  |_|  __)  |__  R & D   www.mshopf.de


More information about the xorg-devel mailing list