[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [Ian Jackson <ian@chiark.greenend.org.uk>] General bug polic



Hi,
>>"Shaleh" == Shaleh  <shaleh@livenet.net> writes:

 Shaleh> On 01-Jun-99 Joey Hess wrote:
 >> shaleh@clifford.livenet.net wrote:
 Shaleh> However I have had a bug or three closed by someone else --
 Shaleh> for the wrong package.  Most recently was an anacron bug that
 Shaleh> was closed by the ytalk maint.  It was an accident, he fixed
 Shaleh> it the moment I told him, but it should not be possible to
 Shaleh> do.

        Setting poliucy shall not prevent errors and typos; so this is
 not a viable argument. 

 Shaleh> Forgive me, I have worked at an ISP for too long and always
 Shaleh> see the cracker side of things.  Currently we are pushing 500
 Shaleh> developers and everyone says "we trust you".  What happens
 Shaleh> when someone violates that trust?  How long will we work to
 Shaleh> clean up the mess?  We have already had developers misuse
 Shaleh> their accounts on the debian.org machines.

        If we have a cracker in our midst, the BTS is the least of our
 problems. If we are trying to protect the project from a malicious
 insider, we need to evaluate the security scenario and come up with a
 solution that addresses teh whole issue, rather than creating
 uncoordinated adhoc solutions (the efficacy of which is in doubt,
 moreever). 

        manoj
-- 
 In a gathering of two or more people, when a lighted cigarette is
 placed in an ashtray, the smoke will waft into the face of the
 non-smoker.
Manoj Srivastava   <srivasta@debian.org>  <http://www.debian.org/%7Esrivasta/>
Key C7261095 fingerprint = CB D9 F4 12 68 07 E4 05  CC 2D 27 12 1D F5 E8 6E


Reply to: