Path: ...!news.roellig-ltd.de!open-news-network.org!weretis.net!feeder8.news.weretis.net!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: candycanearter07 <candycanearter07@candycanearter07.nomail.afraid>
Newsgroups: comp.os.linux.advocacy
Subject: Re: Linux advocacy
Date: Thu, 3 Oct 2024 23:30:04 -0000 (UTC)
Organization: the-candyden-of-code
Lines: 17
Message-ID: <slrnvfu9tv.t6vq.candycanearter07@candydeb.host.invalid>
References: <vcvabp$3bcrt$7@dont-email.me>
 <7pb6fjh0mrcih3gahbk9onfesi9n0ngbff@4ax.com> <vcvil8$3co45$1@dont-email.me>
 <o1k6fj1r84geskevh0fk3ogkldg0h47fu6@4ax.com> <vd070h$3ina5$1@dont-email.me>
 <vd07f3$3itrt$2@dont-email.me> <llhtvpF9t8cU5@mid.individual.net>
 <1r0gc88.1facivp5nvjmgN%snipeco.2@gmail.com>
 <llj54nFg2tnU2@mid.individual.net>
 <2g09fjlgj2teoogoh2s789lb1opqjja53o@4ax.com>
 <bid9fjpf3uhcevktrc5d83if39tafpcf5v@4ax.com> <vd2srh$2ohs$4@dont-email.me>
 <da3bfj1rbd78ct1dhikqj28fk5uhu2q11u@4ax.com> <vddk1c$254hd$6@dont-email.me>
 <slrnvflgcf.lr8.candycanearter07@candydeb.host.invalid>
 <_iHKO.243816$v8v2.95799@fx18.iad> <vdn8d5$3tl7t$3@dont-email.me>
Injection-Date: Fri, 04 Oct 2024 01:30:04 +0200 (CEST)
Injection-Info: dont-email.me; posting-host="fd88dd62a5d6f318320970ed7dab44be";
	logging-data="4125231"; mail-complaints-to="abuse@eternal-september.org";	posting-account="U2FsdGVkX184s10h2KLBqGr/G8g6WWb+y5M/Iyc7DW66h8spqhryjQ=="
User-Agent: slrn/1.0.3 (Linux)
Cancel-Lock: sha1:73dlI7ijKa3qJ7MP75i2y2sVucw=
X-Face: b{dPmN&%4|lEo,wUO\"KLEOu5N_br(N2Yuc5/qcR5i>9-!^e\.Tw9?/m0}/~:UOM:Zf]%
 b+ V4R8q|QiU/R8\|G\WpC`-s?=)\fbtNc&=/a3a)r7xbRI]Vl)r<%PTriJ3pGpl_/B6!8pe\btzx
 `~R! r3.0#lHRE+^Gro0[cjsban'vZ#j7,?I/tHk{s=TFJ:H?~=]`O*~3ZX`qik`b:.gVIc-[$t/e
 ZrQsWJ >|l^I_[pbsIqwoz.WGA]<D
Bytes: 2481

Lawrence D'Oliveiro <ldo@nz.invalid> wrote at 23:12 this Thursday (GMT):
> On Mon, 30 Sep 2024 20:24:24 -0400, CrudeSausage wrote:
>
>> There's nothing wrong with signing software if you want to limit the
>> damage of malware.
>
> The Linux distros manage this by signing the distribution packages, not 
> the installed binaries. Also they make it easy for users to add third-
> party signing keys (and repos) to the package-installation system.
>
> In short, there are ways to do it that are not actively hostile to Open 
> Source.


Isn't GPG open source?
-- 
user <candycane> is generated from /dev/urandom