看板FB_security
标 题Re: FreeBSD needs Git to ensure repo integrity [was: 2012 incident]
发信站NCTU CS FreeBSD Server (Sun Nov 18 06:11:43 2012)
转信站ptt!csnews.cs.nctu!news.cs.nctu!.cs.nctucs.nctu!.org!ownorg!owner-free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