search for: goodin

Hi all, Since the vault for 7.3.1611 has been cleared out last sunday (20170207) - why is that? - I'm using git to download a "SRPM", or more accurately, its contents. However, using git has one major drawback: It is missing checksums for the files. Are there any plans to provide checksums for the files in git so I can be sure that what I download is actually not tampered with?

...version is simply "it isn't" > Ridiculous? Seriously? I don't think it's time to be in panic mode, but it is time to prepare for the generation-after-next of GPUs which will be able to produce SHA-1 collisions quickly enough to be able to keep up with a git repo. Dan Goodin disagrees that it's not a problem for git in the long run. See: https://arstechnica.com/security/2017/02/at-deaths-door-for-years-widely-used-sha1-function-is-now-dead/ (not a bit of hyperbole in that headline, right? ) Maybe it's a bit premature to call it 'dead' but it is de...

...n't" >> > Ridiculous? Seriously? I don't think it's time to be in panic mode, > but it is time to prepare for the generation-after-next of GPUs which > will be able to produce SHA-1 collisions quickly enough to be able to > keep up with a git repo. > > Dan Goodin disagrees that it's not a problem for git in the long run. > See: > https://arstechnica.com/security/2017/02/at-deaths-door-for-years-widely-used-sha1-function-is-now-dead/ > (not a bit of hyperbole in that headline, right? ) Maybe it's a bit > premature to call it 'dead...