Re: Package management unsafe?

["Michael Casadevall" <sonicmctails@gmail.com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

It doesn't have to have updated packages, maybe have something like this

APT-Ping: *timestamp*

and then push out a new packages file with just an updated timestamp in it.
Michael


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: http://getfiregpg.org

iD8DBQFId//JpblTBJ2i2psRAu6uAJ48+knPTzxi1InA/Wg3AN4m2Rt8WwCfa/ES
rddl6+w/Kw+7UBVNQLjLplE=
=fGdJ
-----END PGP SIGNATURE-----

On Fri, Jul 11, 2008 at 8:39 PM, Frank Lichtenheld <djpig@debian.org> wrote:

On Fri, Jul 11, 2008 at 11:48:03AM -0400, Michael Casadevall wrote:
> Maybe a check should be added to APT to flag a warning if there has been no
> updates for a significant period of time? That way if a mirror ever does
> that, its more detectable.

That really doesn't make any sense for stable users since our point
releases aren't exactly weekly ;)

Gruesse,
--
Frank Lichtenheld <djpig@debian.org>
www: http://www.djpig.de/