From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from atuin.qyliss.net (localhost [IPv6:::1]) by atuin.qyliss.net (Postfix) with ESMTP id AE9CD352D; Thu, 29 Jan 2026 13:11:44 +0000 (UTC) Received: by atuin.qyliss.net (Postfix, from userid 993) id 3B64E350D; Thu, 29 Jan 2026 13:11:42 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 4.0.1 (2024-03-26) on atuin.qyliss.net X-Spam-Level: X-Spam-Status: No, score=-0.8 required=3.0 tests=DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,DMARC_MISSING,RCVD_IN_DNSWL_LOW,SPF_HELO_PASS autolearn=unavailable autolearn_force=no version=4.0.1 Received: from fhigh-a7-smtp.messagingengine.com (fhigh-a7-smtp.messagingengine.com [103.168.172.158]) by atuin.qyliss.net (Postfix) with ESMTPS id 44123350A for ; Thu, 29 Jan 2026 13:11:40 +0000 (UTC) Received: from phl-compute-12.internal (phl-compute-12.internal [10.202.2.52]) by mailfhigh.phl.internal (Postfix) with ESMTP id 75DA21400075; Thu, 29 Jan 2026 08:11:38 -0500 (EST) Received: from phl-frontend-04 ([10.202.2.163]) by phl-compute-12.internal (MEProxy); Thu, 29 Jan 2026 08:11:38 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alyssa.is; h=cc :cc:content-type:content-type:date:date:from:from:in-reply-to :in-reply-to:message-id:mime-version:references:reply-to:subject :subject:to:to; s=fm2; t=1769692298; x=1769778698; bh=iAzNmBIIzd 2/Na3OF0SOcTZDE+6bzVWeHgna8KPJhpA=; b=y+6hpR2zweo6xillSmSKU1p5Pm uguFCGnhRL0AR3ZMnNUiQ/blPYKnbMOWJ3RWr1lUwgRpV0GquK48iWdA46dj/htU mQRK/+U4Gl4JYCHGWWQVTjcyKP36S7iwAIJEiL19++v9se1IaJeqQyXrUyNlXuxY SBvl2IB58lLukaYvtYgDtYDisuBsLU6h/y6LOc/vNcEdT8nBhoMd/ba6rVLaIyje Ti5apC6Tiy107KDzVlAwjyXB9w+gCYl5Ig89o4XGZ171IdBMank0JJ8VXB1sYotp 3/g3LP98db5b/DNC+nmb52XxWCHASi18/2I2RelaFwS6X3OpB3gNGaHNAKLw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-type:content-type:date:date :feedback-id:feedback-id:from:from:in-reply-to:in-reply-to :message-id:mime-version:references:reply-to:subject:subject:to :to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; t= 1769692298; x=1769778698; bh=iAzNmBIIzd2/Na3OF0SOcTZDE+6bzVWeHgn a8KPJhpA=; b=Uh0ND2sPmIocdKRs34lJCEGYUF3y9+8iMQw/+0/OPNtCb3Bz3GY OA2Fd8O1BPBAUZHSawyG8Yf+XgvNt7fVWbSyntlbAwehJSj/4TPGUxsKip04PvMz ssWP5eMqyxE3bJK9Oyk7e+kfNcPabtoTIqqckWy1d1i5R581YNm20QAl3NnmrUoF 4IUSOEQENo4aScxsAh2C7ih0MOmkIFwHzjmTi70bqHb+TZQz3CQOyQEesZbzm4B/ YMfup0rfT7I732a1Ms5dR3SUDdk6HNkLoh23sm5dYXAEuG2HMcad1DYe/FC45N5J +xWY4oC/VMfZJs31rsie3TBVkwUZJm0SGyQ== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefgedrtddtgdduieeivdelucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfurfetoffkrfgpnffqhgenuceu rghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmnecujf gurhephffvvefujghffffkgggtsehgtderredttddtnecuhfhrohhmpeetlhihshhsrgcu tfhoshhsuceohhhisegrlhihshhsrgdrihhsqeenucggtffrrghtthgvrhhnpeeiudffue eilefgtefgtddttdekkeehkefgheekudefveetgeefiefftedvteeuveenucevlhhushht vghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehhihesrghlhihsshgrrd hishdpnhgspghrtghpthhtohepvddpmhhouggvpehsmhhtphhouhhtpdhrtghpthhtohep uggvmhhiohgsvghnohhurhesghhmrghilhdrtghomhdprhgtphhtthhopeguvghvvghlse hsphgvtghtrhhumhdqohhsrdhorhhg X-ME-Proxy: Feedback-ID: i12284293:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Thu, 29 Jan 2026 08:11:33 -0500 (EST) Received: by mbp.qyliss.net (Postfix, from userid 1000) id 81DA27325A2E; Thu, 29 Jan 2026 14:11:23 +0100 (CET) From: Alyssa Ross To: Demi Marie Obenour Subject: Re: [PATCH] GPU acceleration In-Reply-To: <20260120-gpu-accel-2-v1-1-ab80ef58d44e@gmail.com> References: <20260120-gpu-accel-2-v1-1-ab80ef58d44e@gmail.com> Date: Thu, 29 Jan 2026 14:11:22 +0100 Message-ID: <87ecn84l8l.fsf@alyssa.is> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Message-ID-Hash: ZZCK2LUX4HHOPD4V563R4MQJYNOY3UEM X-Message-ID-Hash: ZZCK2LUX4HHOPD4V563R4MQJYNOY3UEM X-MailFrom: hi@alyssa.is X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-devel.spectrum-os.org-0; header-match-devel.spectrum-os.org-1; header-match-devel.spectrum-os.org-2; header-match-devel.spectrum-os.org-3; header-match-devel.spectrum-os.org-4; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header CC: Spectrum OS Development X-Mailman-Version: 3.3.9 Precedence: list List-Id: Patches and low-level development discussion Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: --=-=-= Content-Type: text/plain Demi Marie Obenour writes: > I used an empty string for the hashes in 'gitfetch' and > 'buildRustPackage'. This is, of course, incorrect. The correct value > according to my own testing is > "sha256-EOMkQ0aPRjsowdGuZjy5K1yKyKEzd5AVYxaECTz7n6k=" (git hash) and > "sha256-k3dmxIuCQoOrn/VwauTdzuRw/XKQB6LPLgO5ql0rE7E=" (cargoHash). > However, these should be validated before applying them, which is why I > didn't include them in the patch themselves. This is a security > precaution: anyone who wants to inject malicious content must serve it > to multiple people, not just one. Even if you had included the hashes, I'd still have had to download the resources myself, so they'd still have had to serve the malicious content to me, too. I don't have access to your cached downloads. If anything, including the hashes would have been of benefit, because then I'd have had something to compare mine too. (Not that it's a substantial threat in any case.) --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iHUEARYKAB0WIQRV/neXydHjZma5XLJbRZGEIw/wogUCaXtcegAKCRBbRZGEIw/w onKGAQCzfUpE/cB7ynEHDk2KNpvhHRHRVoaxACElxht9FkT29gEAoDSGi3Cnnurf g5s2CLBirZoju8K3QqvRK53JVdo1mgg= =Lu8i -----END PGP SIGNATURE----- --=-=-=--