On Thu, 13 Oct 2011 10:39:03 -0700 Toshio Kuratomi a.badger@gmail.com wrote:
... So what are our admins to do? 1) We could ignore the issue. We have a lot of contributors. Maybe we should just expect that some of their accounts are going to be compromised.
Not maybe. Certainly some of the accounts will be compromised.
- We could require
everyone to change keys.
And some time after that, some accounts will be compromised again. Some of the same accounts as before, and some other accounts. Not maybe. Certainly, 100%.