📅 Original date posted:2013-04-03
📝 Original message:On Tue, Apr 2, 2013 at 11:41 PM, Wladimir <laanwj at gmail.com> wrote:
> Maybe now that bitcoin is growing out of the toy phase it's an idea to start
> gpg signing commits, like the Linux kernel
> (https://lwn.net/Articles/466468/).
>
> But I suppose then we can't use github anymore to merge as-is and need
> manual steps?
Correct, that rules out github, AFAICS.
Though, honestly, when I ACK that means I read the code, which is more
important than the author really. github seems fine for that still,
though I do wonder if there is a race possible,
* sneak uploads innocent branch sneak/bitcoin.git #innocent
* sneak creates pull req
* just before I click "pull", sneak rebases the branch to something evil
--
Jeff Garzik
exMULTI, Inc.
jgarzik at exmulti.com
Jeff Garzik [ARCHIVE] /
npub1kf…f3f58
2023-06-07 11:42:57
in reply to nevent1q…62fv
Author Public Key
npub1kf0ppcjaguxekg24yx6smgxlu73qn0k8lm0t2wrqc0scpl7u3sgsmf3f58Seen on
wss://relay.nostr.bandPublished at
2023-06-07 11:42:57Event JSON
{
"id": "a8460107a56649bea1a74d30ba2f1e42231092272923977ed361a3e1ebec1f52",
"pubkey": "b25e10e25d470d9b215521b50da0dfe7a209bec7fedeb53860c3e180ffdc8c11",
"created_at": 1686138177,
"kind": 1,
"tags": [
[
"e",
"376915607cf28908297a49c1e3bfa7d2a09a4c98505d9700468cfd7dda18d84b",
"",
"root"
],
[
"e",
"fc6fa6b5452a941bc559bd70ee293c48ce952b61d17424296480260c65f62a24",
"",
"reply"
],
[
"p",
"30217b018a47b99ed4c20399b44b02f70ec4f58ed77a2814a563fa28322ef722"
]
],
"content": "📅 Original date posted:2013-04-03\n📝 Original message:On Tue, Apr 2, 2013 at 11:41 PM, Wladimir \u003claanwj at gmail.com\u003e wrote:\n\u003e Maybe now that bitcoin is growing out of the toy phase it's an idea to start\n\u003e gpg signing commits, like the Linux kernel\n\u003e (https://lwn.net/Articles/466468/).\n\u003e\n\u003e But I suppose then we can't use github anymore to merge as-is and need\n\u003e manual steps?\n\nCorrect, that rules out github, AFAICS.\n\nThough, honestly, when I ACK that means I read the code, which is more\nimportant than the author really. github seems fine for that still,\nthough I do wonder if there is a race possible,\n\n* sneak uploads innocent branch sneak/bitcoin.git #innocent\n* sneak creates pull req\n* just before I click \"pull\", sneak rebases the branch to something evil\n\n-- \nJeff Garzik\nexMULTI, Inc.\njgarzik at exmulti.com",
"sig": "bc48018748a842f5a16fa0fad97cbfd661c8af93819b338b227a98a4cba2a04aa55c2d15a3d59e61798951455ced77f266b601e6cb442d7f39362cef9e88348b"
}