-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Ron Johnson wrote: > On 2010-04-19 16:19, Clive McBarton wrote: > [snip] >> >> How come there is no link anywhere on debian.org pointing to >> debian-multimedia.org? Anything to establish a chain of trust. As it is, >> I looked and looked but didn't find. Even when searching for >> "multimedia" on debian.org, it does not mention debian-multimedia.org at >> all. Not even when searching for "debian-multimedia". Every new debian >> user trying to verify the credibilitiy of debian-multimedia.org would >> have given up at this point for sure. > > Google is pretty darned ubiquitous, and has been for 8+ years. > > Putting "Debian play" in the FF/IW search bar auto-completes "debian > play encrypted dvd", and each of the first 5 links mentions d-mm.o.
Yes, google (and all other search sites) quickly lead to d-m. But what does this really prove? We all know that google (and all other search sites) are far from immune against finding malware sites. Example: google "windows multimedia". On the first page of results, half the hits are sites with pretty dubious names. I wouldn't be surprised if some of them actually distributed malware. Linux is generally better protected against malware as Windows, but this is one vulnerability that is common to both: if you install anything from an untrusted repo, and if that repo had malware, you're toast. > "Mentioned" does *not* mean "endorsed". Never has, never will. > d-mm.o is not an official Debian site, so it's nor mentioned anywhere > except his personal page and the list archives. I understand that point of view. But it is a point of view that will make people stay away from d-m (and pretty much all other repos for that matter). It would help a lot if the key of d-m (package debian-multimedia-keyring) was in the debian repos, not just the d-m repos. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkvM0msACgkQ+VSRxYk440+0dwCgj57XNX8Clqcwiib5Hln1HxVZ k1wAoOxWT7C1A2xQ6N4kWSl0rs2Z3/l5 =+WNb -----END PGP SIGNATURE----- -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/4bccd26b.4020...@web.de
