Date:  Sat, 2 Feb 2008 22:15:42 -0500
From:  "Brian N. Smith" <brian (at mark) nuonce.net>
Subject:  [coba-e:11887] Re: BQ Repository mirror
To:  <coba-e (at mark) bluequartz.org>
Message-Id:  <008501c86613$0f8b2c50$1e64a8c0 (at mark) nuonce.net>
References:  <47A4F963.8060102 (at mark) virtbiz.com> <200802021920.14663.lesmith (at mark) ecsis.net>
X-Mail-Count: 11887

BlueQuartz Mirrors.

I am all for everyone making a mirror, but before you start using 
other people's mirrors, make sure you TRUST the people you are using.

Realize this, if Joe Mirror Provider wantted to be an asshole he could 
easily modify an RPM to over write your admin password and provide a 
perminate back door into your server.

This is NOT to say the two gentleman who offered up such a mirror 
today are not truthworthy, that is entirely for YOU to decide.

From the BQ Developer side of the fence, however slowly, it is being 
worked on to have offical BQ repos, and I am sure Hisao will take 
Chris from Virtbiz up on the offer, for now, just realize that with 
ANY 3rd party application, you are putting your server to someone 
else's hands.

Just an FYI, the same goes for ALL mirror sites, be it Dag's RPMS, or 
some other one.  Just please, think before you just start downloading 
stuff from people.

Just my two cents.

Thanks!

Brian N. Smith
NuOnce Networks, Inc.