Re: Building packages with exact binary matches

2007-09-24 Thread Benjamin A7;Lee
sure it's trustworthy, then you may as well be using FreeBSD, Gentoo, or similar... You're also assuming that the source code is trustworthy. If the binary packages can be compromised, so can the source packages. -- Benjamin A'Lee <[EMAIL PROTECTED]> http://subvert.org.uk/~bma/ signature.asc Description: Digital signature

Re: Building packages three times in a row

2007-09-23 Thread Benjamin A7;Lee
ess to the build host, whatever list of bits to match could be changed along with the binary, the md5sum, and the gpg-signature. Anyway, surely the point of hashes like md5, sha1, etc, is that it's much faster to do that than to compare large files bit by bit? -- Benjamin A'Lee <[EMAIL P

Re: Debian's Linux kernel continues to regress on freedom

2007-09-12 Thread Benjamin A7;Lee
t people will never want to modify RFCs, but some people might (or, at least, create derivative works, translations, etc.), so they should be required to be free or they should stay in the non-free section. -- Benjamin A'Lee <[EMAIL PROTECTED]> http://subvert.org.uk/~bma/ "It'

Re: [Debconf-discuss] list of valid documents for KSPs

2006-05-28 Thread Benjamin A7;Lee
rtin willingly showed his real ID to anyone who didn't accept his Transnational Republic ID. That doesn't sound all that dishonest to me - surely if the intent was to deceive he wouldn't have shown any real ID? bma -- Benjamin A'Lee - <http://bmalee.eu/~bma/> Secre