linux-kernel - Re: kernel.org status: establishing a PGP web of trust

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <CACqU3MVd8z05_x8HWKyeXn8fVp0NZkNGYh5ZMu0BPJyo4Bqj=A@mail.gmail.com>
Date:	Wed, 5 Oct 2011 20:50:08 -0400
From:	Arnaud Lacombe <lacombar@...il.com>
To:	Greg KH <gregkh@...e.de>
Cc:	Adrian Bunk <bunk@...sta.de>, Valdis.Kletnieks@...edu,
	"Frank Ch. Eigler" <fche@...hat.com>,
	"H. Peter Anvin" <hpa@...or.com>,
	"Rafael J. Wysocki" <rjw@...k.pl>,
	Linux Kernel Mailing List <linux-kernel@...r.kernel.org>
Subject: Re: kernel.org status: establishing a PGP web of trust

Hi,

On Wed, Oct 5, 2011 at 8:23 PM, Arnaud Lacombe <lacombar@...il.com> wrote:
> Hi,
>
> On Wed, Oct 5, 2011 at 7:55 PM, Greg KH <gregkh@...e.de> wrote:
>> On Wed, Oct 05, 2011 at 04:36:50PM -0400, Arnaud Lacombe wrote:
>>> Hi,
>>>
>>> On Wed, Oct 5, 2011 at 4:19 PM, Adrian Bunk <bunk@...sta.de> wrote:
>>> > On Wed, Oct 05, 2011 at 04:00:39PM -0400, Arnaud Lacombe wrote:
>>> >> Hi,
>>> >>
>>> >> On Tue, Oct 4, 2011 at 6:39 PM, Adrian Bunk <bunk@...sta.de> wrote:
>>> >>...
>>> >> > Each time a patch goes through him into the kernel, he certifies that
>>> >> > his real name is Andrew Morton.
>>> >> >
>>> >> > If that would not be his real name, it would make him somewhere between
>>> >> > completely untrustable and punishable at court.
>>> >> >
>>> >> Under which jurisdiction ? Under which law ?
>>> >>
>>> >> IANAL, but US copyright law does recognize the use of pseudonym for
>>> >> copyrighted work[0], without requirements to disclose one's legal
>>> >> name.
>>> >
>>> > I am not talking about copyright law.
>>> >
>>> > When you add a Signed-off-by: to a patch you have to use your real name
>>> > (see Documentation/SubmittingPatches for details).
>>> >
>>> > If violating that would be considered fraud or some other crime in some
>>> > jurisdictions is likely a non-trivial question.
>>> >
>>> One might still question the legality/constitutionality of such a
>>> statement. AFAIK, Greg KH, author of the sentence (in af45f32d25c) is
>>> not a lawyer.
>>
>> How do you not know that such a sentance was not vetted by a lawyer?  :)
>>
> I assume the worst case, unless given documents proving otherwise. The
> commit message is not particularly verbose.
>
Just thinking about it, but even if lawyers have been involved, this
has been done, unless error of my part, behind closed doors, without
any public records, so I'd tempted to ask "who paid those lawyers?",
"what was the qualification of those lawyers?", "what was the interest
of those lawyers?" and "what was the interest of those who paid the
lawyers?".

Moreover, the commit message's subject states "We can not allow
anonymous contributions to the kernel", however it fails to describe
who's behind "we".

Finally, I'd be tempted to make a difference between "Anonymous" and
"Pseudonymous".

regards,
 - Arnaud
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/