Re: Debian Project Leader Election 2003 Results
Matthew Wilcox <willy@debian.org> writes:
> On Mon, Mar 31, 2003 at 12:02:14PM -0500, Aaron M. Ucko wrote:
> > Like Sam, I see no particular need for salt beyond the username.
>
> Uh.. Sam who? I saw no email. The username is insufficient salt; the
Sam Hartman <hartmans@d.o>, in <[🔎] tslfzp3jye6.fsf@konishi-polis.mit.edu>
(which seems to have gone only to the list).
> secretary has a list of all debian usernames and has at least a year to
> attempt to construct collisions.
True, though I think even finding collisions on that timescale would
be an accomplishment.
The extra salt certainly wouldn't *hurt*; I'm just not convinced it's
necessary.
> Yes, that's true. Or add a significanlty longer batching period; maybe
> one day is enough.
Or min(1 day, 100 votes) to deal with falloff.
--
Aaron M. Ucko, KB1CJC (amu at alum.mit.edu, ucko at debian.org)
Finger amu@monk.mit.edu (NOT a valid e-mail address) for more info.
Reply to: