On Fri, Oct 04, 2013 at 01:58:51PM +0200, Arto Bendiken wrote: > On Fri, Oct 4, 2013 at 1:35 PM, Peter Todd <p...@petertodd.org> wrote: > > The second caveat is more specific to Bitcoin: people tend to rebase > > their pull-requests over and over again until they are accepted, but > > that also means that code review done earlier doesn't apply to the later > > code pushed. Bitcoin is a particularly high profile, and high profit, > > target for people trying to get malicious code into the codebase. > > On that note, this 2003 example of an attempt to backdoor the Linux > kernel is pertinent: > > http://lwn.net/Articles/57135/ > > The backdoor in question came down to a single missing character, > easily overlooked by a reviewer if a spotlight hadn't been thrown on > it for other reasons. Compromising a Bitcoin implementation isn't > going to be as easy as that, one would hope, but certainly it seems > only a matter of time until there's an attempt at it.
Exactly. Ideally code review discussions would be PGP signed and have a mechanism for someone to sign a commit saying they had in fact reviewed it. Combined with git's per-commit signature mechanism it'd make it possible to write a git-pull hook that checked that whatever was being pulled had some sufficient number of signatures from people whose reviews you trusted. With such a system you could host code review anywhere safely, or for that matter, use a completely distributed system. But that's going to be a long way off. In the meantime github is probably more trustworthy and competent than anything we ran ourselves, and we should focus on making sure reviewers eyeballs actually look at the code that ends up in master. -- 'peter'[:-1]@petertodd.org
signature.asc
Description: Digital signature
------------------------------------------------------------------------------ October Webinars: Code for Performance Free Intel webinars can help you accelerate application performance. Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from the latest Intel processors and coprocessors. See abstracts and register > http://pubads.g.doubleclick.net/gampad/clk?id=60134791&iu=/4140/ostg.clktrk
_______________________________________________ Bitcoin-development mailing list Bitcoin-development@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bitcoin-development
