-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 10/28/2010 10:51 PM, Tom "spot" Callaway wrote: > On 10/28/2010 07:50 PM, Stephen Gallagher wrote: >> Spot is helping a great deal by stripping >> out those libraries that he can and helping Google's upstream become >> aware of the problem that those bundles represent. > > FWIW, Google does not care. They have made practically zero effort to do > anything, and in most of the cases I highlighted, they don't see the > situation as a problem. > > To be honest, I'm not sure if this adds to or takes away from the rest > of your points, but I wanted to be clear there. > > I see it as a help, most people do, but Google does not. Thanks for the clarification. Regardless, I see this as the correct approach to be taking, so keep up your efforts :) - -- Stephen Gallagher RHCE 804006346421761 Delivering value year after year. Red Hat ranks #1 in value among software vendors. http://www.redhat.com/promo/vendor/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAkzKpmQACgkQeiVVYja6o6Ok6gCgqtB9ZeO40sXcytmzlFSCH8WN 5lcAoJGG5g68YcDMmW5gPPBvlBBiySIW =gsIn -----END PGP SIGNATURE----- _______________________________________________ advisory-board mailing list advisory-board@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/advisory-board
