Re: Protections against a mad maintainer?

[rdm@tad.micro.umn.edu]

Jonathan, writing from vega.netg.se:
> Believe me, if you want to make sure that an upload from you is
> untracable... It can be done ..

Untraceable is a matter of degree.

Forging someone's pgp signature is about as difficult as breaking
into a commercial software publisher's office and replacing the
master-copies of software there.  Sure, it can be done, but this
possibility doesn't favor one distribution channel over another.

Also, "untraceable" has a strong element of risk -- you're going
to have a presence somewhere, but does anyone care enough to want
to investigate that presence?  If someone cares, then maybe you find
out you're not as untraceable as you'd thought.

-- 
Raul