RE: Moving to Pserver from .rhosts

[Greg A. Woods]

[ On Friday, November 15, 2002 at 11:17:10 (-0800), Shankar Unni wrote: ]
> Subject: RE: Moving to Pserver from .rhosts
>
> Greg opines:
> 
> > Then you have no accountability in your CVS repository.  None.
> 
> You have as much accountability as you have from ssh and the passwd
> file: you know the name of the person (from the pserver passwd file),
> and that is recorded in the repository.

No you don't.  CVS is not a security application.  It was not designed
to be one and it cannot ensure any (i.e. not any at all) level of
accountabilty.  None whatsoever.  Nil.  Zilch.  Zip.  Zero.  Negative even.

If you think otherwise you are sadly mistaken and seriously fooling
yourself into a complete and utterly false sense of security.

-- 
                                                                Greg A. Woods

+1 416 218-0098;            <address@hidden>;           <address@hidden>
Planix, Inc. <address@hidden>; VE3TCP; Secrets of the Weird <address@hidden>