From mboxrd@z Thu Jan 1 00:00:00 1970 From: Tobias Geerinckx-Rice Subject: Re: Mistaken authorship on some commits Date: Thu, 02 Apr 2020 19:43:13 +0200 Message-ID: <87369liy1a.fsf@nckx> References: <87r1x5stuo.fsf@asu.edu> <20200402173326.GA4768@jasmine.lan> <874ku1iy6n.fsf@nckx> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Return-path: Received: from eggs.gnu.org ([2001:470:142:3::10]:49374) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jK3s8-0003FL-D0 for guix-devel@gnu.org; Thu, 02 Apr 2020 13:43:21 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1jK3s7-0003RN-Am for guix-devel@gnu.org; Thu, 02 Apr 2020 13:43:20 -0400 Received: from tobias.gr ([2a02:c205:2020:6054::1]:52154) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1jK3s7-0003Qz-4K for guix-devel@gnu.org; Thu, 02 Apr 2020 13:43:19 -0400 In-reply-to: <874ku1iy6n.fsf@nckx> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane-mx.org@gnu.org Sender: "Guix-devel" To: Leo Famulari Cc: guix-devel@gnu.org --=-=-= Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Tobias Geerinckx-Rice =E5=86=99=E9=81=93=EF=BC=9A >> If you do `git show --format=3Dfull` on these commits, it shows=20 >> who >> actually committed them to the repo. > > Are you sure this isn't trivially spoofable? > > Not that it would be a big deal, but =E2=80=98actually committed=E2=80=99= might=20 > give > someone wrong ideas. Forgot to add: I'd recommend --show-signature for that reason. Kind regards, T G-R --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfo+u0AlEeO9y5k0W2Imw8BjFSTwFAl6GJDIACgkQ2Imw8BjF STz+mg/7BTI5QYGleIr39OF0NQcim0yadgXpRsdzaU6I3ZgantHG6HrfKj4a9ZLf PhCQLCI/TGc91simzLCb6J6zuv41DP3HI/hSHg2VTcMTDyZLYsZaVp7W5Bcm92Jj G+TezbohuzbFseHoiTdkO10xDScYyqNgn8otjgjkMf2Lg05ba3unzwYXQqnIS2g/ aWz3I38eBlsOapw1f0NY1GvhNPdTDjx8M96Avi98n5xKdiciTWCabrPTTTXyI9Jj A3m8xxOo6vR0cHZRnGFY0Wr9sp4o5QJy0zzX3a8rhtI/q64oIcyTT9GXR5XbXeIe lbuGOfVOyZIwZwGxJneLFp4OceSBl3fRd0Yuue1OnUoizWpXU+kxS3YGtTouBjIW o4imf12xNapm9qtCj5I3xk7uHxnZ47AOEc/mUoBy3DEjdsCbw6dOuuYGwApiv++2 3U8yt1jjvTp4Yr38BS4iCnSalIhXtHrLHuynr5moz9fCTjsCMbbdqaHDe5r2CBG2 YWSke9prPBm9bW0bNS9EhaFvpNad1RFXrXZgMIcSM/02KNi+nmBcdJN8Qahm6h6S Sl68Wb6UtUu1TjW5E0pn0CRiCPVeUwJeQAHBzf4mevVvQqN7a+IP2p3ZhOZQvty8 gqPOTHCUtvREoRj4aGQeLlZfjYJyVxbu14yjErL9Y3vMKbFaYU0= =KnGw -----END PGP SIGNATURE----- --=-=-=--