Peter Palfrader wrote:
> Also, Tor continues to be as fine as ever for people who don't offer
> hidden services, so maybe grave is a bit strong.

Nonetheless it is a serious security hole for people who *do* run hidden
services.  I thought grave might be a bit too high, but serious is specifically
for Debian Policy violations, and important seems a bit too weak.  If there was
something between grave and important (e.g. "a security issue with a particular
menu item") I would have picked that.

In the abscence of such a severity I stand by my decision of grave.  (Better it
be considered more severe than it is, than to be considered less severe than it
is.)

-- 
Chris Howie
http://www.chrishowie.com

-----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GCS/IT d-(--) s:- a--->? C++(+++)$> UL++++ P++++$ L+++>++++ E---
W++ N o++ K? w--$ O M- V- PS--(---) PE++ Y+ PGP++ t+ 5? X-
R(+)>- tv-(--) b- DI+> D++ G>+++ e>++ h(--)>--- !r>+++ y->+++
------END GEEK CODE BLOCK------

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to