[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Debian Project Leader Election 2003 Results

Matthew Wilcox <willy@debian.org> writes:

> On Mon, Mar 31, 2003 at 12:02:14PM -0500, Aaron M. Ucko wrote:
> > Like Sam, I see no particular need for salt beyond the username.
> Uh.. Sam who?  I saw no email.  The username is insufficient salt; the

Sam Hartman <hartmans@d.o>, in <tslfzp3jye6.fsf@konishi-polis.mit.edu>
(which seems to have gone only to the list).

> secretary has a list of all debian usernames and has at least a year to
> attempt to construct collisions.

True, though I think even finding collisions on that timescale would
be an accomplishment.

The extra salt certainly wouldn't *hurt*; I'm just not convinced it's

> Yes, that's true.  Or add a significanlty longer batching period; maybe
> one day is enough.

Or min(1 day, 100 votes) to deal with falloff.

Aaron M. Ucko, KB1CJC (amu at alum.mit.edu, ucko at debian.org)
Finger amu@monk.mit.edu (NOT a valid e-mail address) for more info.

Reply to: