On Thursday 14 August 2003 08:00, Fred Van Andel wrote:
> On August 13, 2003 10:03 pm, Georgi Georgiev wrote:
> > > I dont have time now (I am at work) but can someone check the
> > > dates of the affected files to see if they are potentially
> > > suspect?
> >
> > Not good enough, is it? One can use "touch" to set the date to
> > anything they want.
>
> Yes you can, but only a truly incompetent cracker would set the date
> to be anything other than the date of the original file. The idea
> is to hide the fact that the file has changed, not broadcast it.

I think it is better to look when the specific digest was added to cvs. As far 
as I know our cvs has not been compromised.

Paul

-- 
Paul de Vrieze
Gentoo Developer
Mail: pauldv@gentoo.org
Homepage: http://www.devrieze.net