Mike Bird - 02.04.19, 00:03:
> On Mon April 1 2019 14:39:28 Martin Steigerwald wrote:
> > In what way is that not good enough for you? What would be required
> > for you to forgive a mistake and go on with your life?
[…]
> What part of Evilham's statement that "it still looks as if gdo and
> the build system were compromised" [1] did you not believe?
> 
> Do you think Evilham was mistaken?  Why?
> 
> Do you think it possible an attacker - KatolaZ or another - was
> in there and later covered his tracks?  Why not?
> 
> I am still hoping the silent core team members are working on this
> as I really don't want to spend the next few months changing distros.

Sorry… at this point I just highly recommend to you:

Breathe in deeply, breathe out deeply.

And give the other core members a moment to give you the reassurance you 
need. Evilham already did so. Unsigned for now, but still.

And after that recommendation I just do the same as Evilham:

Go to sleep.

Honestly: For me there is a fine line between valid security concerns and 
paranoia and for me you just crossed this line.

Give it a rest just for the moment and give the team some time to react 
to your concerns. If you need: Hold back updates for a little longer. 
That update of tzdata I just installed some time ago did not contain any 
security fixes, so there is not really an immediate urgency here.

Martin
-- 
Martin

Attachment: signature.asc
Description: This is a digitally signed message part.

_______________________________________________
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Reply via email to