Hacker News Reader

>I wonder if keeping CVS is not one of the smartest things the OpenBSD project does now.

Given that OpenBSD is supposed to be a security-oriented OS, it's slightly weird that they are using a version control system that does not guarantee that what you put in the repo actually stays there, unchanged. Git guarantees that.

> They are arguably one of the best projects at doing it.

What makes you think that?

View on HN

1) Repo security is a hard proposition. Using git with an ostensibly(SHA-1) immutable history doesn't imply security. git repo integrity is cool, and I'll just point to interesting discussion of attacks and mitigation in http://mikegerwitz.com/papers/git-horror-story.

I'll end my debating with the fact that there is room for improvement.

2) Releasing on time, of high quality, for nearly two decades. Development process.. not that it is some ultimate code or product.

Reply on news.ycombinator.com