Michael Kohl wrote:

>>I honestly don't think it would require that much effort to post brief
>>security related announcements.  
> 
> And besides that it doesn't even have to be done by Gentoo devs. ;)

Just before I joined the security team there was someone that said he
would do that. He called them "GLVP" (for Gentoo Linux Pending
Vulnerabilities). He said he would post to gentoo-security each
Saturday. Guess what ? He posted one and never posted again. Proof for
the paranoid types out there :

http://marc.theaimsgroup.com/?l=gentoo-security&w=2&r=1&s=GLVP&q=b

Guess history keeps repeating itself. It's not that easy to regularly
commit free time to do work. It's easy to complain, it's not that easy
to be part of the solution.

-- 
Koon
Operational Manager, Gentoo Linux Security

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to