Perl master site changed to tobez.org?

Michael Scheidell scheidell at secnap.net
Wed Jun 29 21:37:28 GMT 2005


Tobez: no disrespect intended, obviously you saw a problem with the
master sites for perl 5.8.7 and did what you could to help, and with
your position as a maintainer, I know that the trust we have in you and
your patches is well earned, so don't take this question as anything but
my well-earned paranoia rearing its ugly head:

Yes, building perl5.8.7 did seem like it had a lot of problems with the
master_sites which is why I went to the freebsd ports cvs tree and
looked to see if they fixed it, however, I believe it would be prudent
for me to ask:

How safe is this your site?
And, yes, in some of my build scripts I pull the distfiles from our
local system due to some issues with some of the sites, however, how
safe is tobez.org from hacking?  
(ok, so, how safe is OUR site from hacking) or anyone's for that matter,
so please don't take this as a challenge.  I have enough to do not to
have to go rebuilding our servers.


(from new Makefile for perl5.8)
 
MASTER_SITES=   ${MASTER_SITE_PERL_CPAN} \
                ${MASTER_SITE_LOCAL:S/$/:local/} \
 
http://www.tobez.org/download/port-mirrors/lang/perl58/:local
MASTER_SITE_SUBDIR=     ../../src \
                        tobez/:local ./:local



More information about the freebsd-security mailing list