User masquerading - audit trail?

Marcin Kasperski Marcin.Kasperski at softax.com.pl
Fri Oct 3 14:34:46 CDT 2008


> Mercurial allows you to set the username for patches to anything you
> want.  This makes is trivially simple to masquerade as somebody else.
> (...)

So what? Accounts are always trivial to fake, I can rename my home
machine temporarily to selenic.com and use account matt on it.

If you care, the solution is here:

http://www.selenic.com/mercurial/wiki/index.cgi/GpgExtension

-- 
----------------------------------------------------------------------
| Marcin Kasperski   | We want to know as early as possible whether
| http://mekk.waw.pl | the project will succeed. Thus we attack the
|                    |        high-risk areas first. (Martin)
----------------------------------------------------------------------



More information about the Mercurial mailing list