Mailing-List:	contact cygwin-help AT sourceware DOT cygnus DOT com; run by ezmlm
List-Subscribe:	<mailto:cygwin-subscribe AT sources DOT redhat DOT com>
List-Archive:	<http://sources.redhat.com/ml/cygwin/>
List-Post:	<mailto:cygwin AT sources DOT redhat DOT com>
List-Help:	<mailto:cygwin-help AT sources DOT redhat DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender:	cygwin-owner AT sources DOT redhat DOT com
Delivered-To:	mailing list cygwin AT sources DOT redhat DOT com
Message-ID:	<00d901bfe883$897577c0$c0bf1004@homepc.freedsl.com>
Reply-To:	"Dave Arnold" <avr_fan AT mailandnews DOT com>
From:	"Dave Arnold" <avr_fan AT nettaxi DOT com>
To:	"DJ Delorie" <dj AT delorie DOT com>
Cc:	<cygwin AT sourceware DOT cygnus DOT com>
Subject:	Re: missing tsort in textutils.tar.gz
Date:	Fri, 7 Jul 2000 19:23:41 -0700
MIME-Version:	1.0
X-Priority:	3
X-MSMail-Priority:	Normal
X-Mailer:	Microsoft Outlook Express 4.72.3110.5
X-MimeOLE:	Produced By Microsoft MimeOLE V4.72.3110.3

Thanks for claryfing this.  Is there  a simple utility in cygwin to confirm
the validity using the md5? what unix command can I use?

/dave

-----Original Message-----
From: DJ Delorie <dj AT delorie DOT com>
To: avr_fan AT mailandnews DOT com <avr_fan AT mailandnews DOT com>
Cc: cygwin AT sourceware DOT cygnus DOT com <cygwin AT sourceware DOT cygnus DOT com>
Date: Friday, July 07, 2000 7:06 PM
Subject: Re: missing tsort in textutils.tar.gz


>
>> What about the mirror sites are they also trusted and certified to
>> be virus scanned etc?
>
>First off, sourceware includes MD5 files that you can use to verify
>that packages have been transferred from sourceware to the mirror to
>you.
>
>Second, most mirror sites are running Unix, not Windows, and are much
>less likely to be infected anyway.
>
>Third, virii that *can* infect those Unix sites would not be the types
>of viruses that could infect Cygwin executables inside .tar.gz files.
>
>Fourth, mirror site maintainers are much more likely to be actively
>securing their machines against attacks.
>
>> What about some of the sites like http://cygutils.netpedia.net/ etc?
>> are they trusted/certified too?
>
>Sites, like people, *earn* trust.  We can't just give it to them, nor
>can we certify them.  We only administer the cygwin archives on
>sourceware; that's all we can attest to.  If you want to know what
>other sites use for procedures, you must ask them directly.


--
Want to unsubscribe from this list?
Send a message to cygwin-unsubscribe AT sourceware DOT cygnus DOT com

- Raw text -