garvey@cmic.UUCP (Joe Garvey) (12/06/89)
In article <7370049@hpfcso.HP.COM>, cunniff@hpfcso.HP.COM (Ross Cunniff) writes: > I'm just a compiler hacker, but off the top of my head I can > think of several reasons why distributing patches via USENET > is a bad idea: > > > 1. The other companies who help pay for USENET would > not be happy to find that they're paying for HP > software distribution > > 2. There is no way to ensure that a patch actually > came from HP; this seems like an incredibly obvious > way for someone to distribute a trojan horse > > 3. It is possible (nay, probable) that patches could > become corrupt during transmission; witness the > number of requests for reposts of part N of the > latest neat comp.sources.thing. > How about patches emailed to customers directly thorough the Response Centers? I hope HP will seriously consider junking the MPE based supportline for unix customers and install a unix based unix support line. The customers paying for support could then dial in, get the regular net services, and get the HP value added services too hp300.unix.patches, hp800.nfs.d, hp300.me10.sources, hp.uWCAD, ... (which they would be obligied not to forward). Taking your points in order: 1) Nobody besides me and HP are footing the bills. I (the customer) call the response center (maybe an 800 number so there are no geographic penalties). Although, I wouldn't mind, I'm right near the Western Response Center :-). 2) The patch comes directly from HP... I would hope HP doesn't send out trojan horses :-). 3) I suspect parts are usually lost because of the way a particular machine works. (ie I screw up my machine, so the patch doesn't get forwarded to you). I have yet to see a corrupt file... and they can always use a checksuming scheme to check the integrity of the file. -- Joe Garvey UUCP: {apple,backbone}!versatc!mips!cmic!garvey California Microwave Internet: mips.com!cmic!garvey 990 Almanor Ave HP Desk: xxx ("mips!cmic!garvey")/hp1900/ux Sunnyvale, Ca, 94086 800-831-3104 (outside CA) 408-720-6439 (let it ring) 800-824-7814 (inside CA) Feel free to disagree, but disagree civilly.