On Thu, Apr 17, 2008 at 4:50 PM, Roman V. Shaposhnik <rvs@xxxxxxx> wrote: > There are two things at play: first of all, I usually *do* trust the > content of the repository. Call it matter of personal preference, I think most people here split the trust into "before or after compilation". I must trust that I can clone/checkout code safely so I can review it. Running the code contained in the repo we are discussing a completely different matter. Even before compilation, Makefiles and configure scripts may shoot you in the foot or in the face. But you had at least a chance to review it. cheers, n -- martin.langhoff@xxxxxxxxx martin@xxxxxxxxxx -- School Server Architect - ask interesting questions - don't get distracted with shiny stuff - working code first - http://wiki.laptop.org/go/User:Martinlanghoff -- To unsubscribe from this list: send the line "unsubscribe git" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
