linux-kernel - Re: [RFC PATCH 0/15] x86: Remove support for TSC-less and CX8-less CPUs

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <alpine.DEB.2.21.2505131735170.46553@angie.orcam.me.uk>
Date: Tue, 13 May 2025 22:55:14 +0100 (BST)
From: "Maciej W. Rozycki" <macro@...am.me.uk>
To: John Paul Adrian Glaubitz <glaubitz@...sik.fu-berlin.de>
cc: Linus Torvalds <torvalds@...ux-foundation.org>, 
    Konstantin Ryabitsev <konstantin@...uxfoundation.org>, 
    Borislav Petkov <bp@...en8.de>, "H. Peter Anvin" <hpa@...or.com>, 
    Ingo Molnar <mingo@...nel.org>, linux-kernel@...r.kernel.org, 
    "Ahmed S . Darwish" <darwi@...utronix.de>, 
    Andrew Cooper <andrew.cooper3@...rix.com>, 
    Ard Biesheuvel <ardb@...nel.org>, Arnd Bergmann <arnd@...nel.org>, 
    Dave Hansen <dave.hansen@...ux.intel.com>, 
    John Ogness <john.ogness@...utronix.de>, 
    Peter Zijlstra <peterz@...radead.org>, 
    Thomas Gleixner <tglx@...utronix.de>
Subject: Re: [RFC PATCH 0/15] x86: Remove support for TSC-less and CX8-less
 CPUs

On Tue, 13 May 2025, John Paul Adrian Glaubitz wrote:

> > >  Thank you.  It seems it'll be tough for me though to fulfil the GPG key
> > > trustability requirement.  While I've used PGP/GPG since 1995, I haven't
> > > been active collecting signatures with my more recent keys/IDs and neither
> > > I have appeared in public among Linux kernel developers often enough for
> > > me to be identified by face over a video call.  Oh well...
> > 
> > I don't think this has been insurmountable before, particularly for
> > anybody who has been around for as long as you have.  Even your
> > current email goes back to at least the beginnings of git.

 Hmm, a .mailmap artifact perhaps; I actually only switched to my current 
e-mail address back in 2021 once linux-mips.org has lost all the remaining 
credibility in my eyes.  There's exactly one "Patch-dusted-off-by:" commit 
using my yet earlier personal address, plus a bunch using my various old 
work addresses too.

 All the earlier work has been buried either in the linux-mips.org git 
repo, going back via conversion from CVS to:

commit 1513ff9b7899ab588401c89db0e99903dbf5f886
Author: Ralf Baechle <ralf@...ux-mips.org>
Date:   Mon Nov 28 11:59:19 1994 +0000

    Import of Linus's Linux 1.1.68

(which I still do hope to fully recover and for which kernel.org seems to 
be the right ultimate haven), or in LKML and other mailing list archives.

 None of this however proves any GPG key offered is actually mine.

> > If "two decades+ of active kernel development involvement using the
> > same email address" doesn't make you eligible for a kernel.org
> > account, we're doing something wrong.
> 
> I agree. Maciej does a fantastic job saving old junk^W^Wretro hardware ;-).

 Thank you.  That makes two of us; the rest has switched to NetBSD.

> I'm sure there should be anyone in Maciej's area that could sign his keys.

 Undoubtedly, but finding someone local who has a kernel.org account and 
can actually tell I am who I claim I am will be rather tough, and trusting 
a government-issued ID alone may be questionable nowadays, as correctly 
observed in <https://korg.docs.kernel.org/accounts.html#pgp-web-of-trust>.

  Maciej