On Thu, 13 Oct 2011 10:39:03 -0700
Toshio Kuratomi <a.badger(a)gmail.com> wrote:
...
So what are our admins to do? 1) We could ignore the issue. We have
a lot of contributors. Maybe we should just expect that some of
their accounts are going to be compromised.
Not maybe. Certainly some of the accounts will be compromised.
2) We could require
everyone to change keys.
And some time after that, some accounts will be compromised again. Some
of the same accounts as before, and some other accounts. Not maybe.
Certainly, 100%.
--
Bernd Stramm
bernd.stramm(a)gmail.com