Mailing-List: contact cygwin-help AT sourceware DOT cygnus DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT sources DOT redhat DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT sources DOT redhat DOT com>
List-Help: <mailto:cygwin-help AT sources DOT redhat DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT sources DOT redhat DOT com
Delivered-To: mailing list cygwin AT sources DOT redhat DOT com
Message-ID: <00d901bfe883$897577c0$c0bf1004@homepc.freedsl.com>
Reply-To: "Dave Arnold" <avr_fan AT mailandnews DOT com>
From: "Dave Arnold" <avr_fan AT nettaxi DOT com>
To: "DJ Delorie" <dj AT delorie DOT com>
Cc: <cygwin AT sourceware DOT cygnus DOT com>
Subject: Re: missing tsort in textutils.tar.gz
Date: Fri, 7 Jul 2000 19:23:41 -0700
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 4.72.3110.5
X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3110.3

Thanks for claryfing this.  Is there  a simple utility in cygwin to confirm
the validity using the md5? what unix command can I use?

/dave

-----Original Message-----
From: DJ Delorie <dj AT delorie DOT com>
To: avr_fan AT mailandnews DOT com <avr_fan AT mailandnews DOT com>
Cc: cygwin AT sourceware DOT cygnus DOT com <cygwin AT sourceware DOT cygnus DOT com>
Date: Friday, July 07, 2000 7:06 PM
Subject: Re: missing tsort in textutils.tar.gz


>
>> What about the mirror sites are they also trusted and certified to
>> be virus scanned etc?
>
>First off, sourceware includes MD5 files that you can use to verify
>that packages have been transferred from sourceware to the mirror to
>you.
>
>Second, most mirror sites are running Unix, not Windows, and are much
>less likely to be infected anyway.
>
>Third, virii that *can* infect those Unix sites would not be the types
>of viruses that could infect Cygwin executables inside .tar.gz files.
>
>Fourth, mirror site maintainers are much more likely to be actively
>securing their machines against attacks.
>
>> What about some of the sites like http://cygutils.netpedia.net/ etc?
>> are they trusted/certified too?
>
>Sites, like people, *earn* trust.  We can't just give it to them, nor
>can we certify them.  We only administer the cygwin archives on
>sourceware; that's all we can attest to.  If you want to know what
>other sites use for procedures, you must ask them directly.


--
Want to unsubscribe from this list?
Send a message to cygwin-unsubscribe AT sourceware DOT cygnus DOT com