From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 6361 invoked by uid 1002); 14 Aug 2003 10:26:12 -0000 Mailing-List: contact gentoo-dev-help@gentoo.org; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@gentoo.org Received: (qmail 28716 invoked from network); 14 Aug 2003 10:26:11 -0000 From: Paul de Vrieze To: gentoo-dev@gentoo.org Date: Thu, 14 Aug 2003 12:26:10 +0200 User-Agent: KMail/1.5.3 References: <1060793784.24922.2243.camel@simple> <20030814050327.GF2331%chutz@gg3.net> <200308132300.15639.fava@gentoo.org> In-Reply-To: <200308132300.15639.fava@gentoo.org> MIME-Version: 1.0 Content-Type: multipart/signed; protocol="application/pgp-signature"; micalg=pgp-sha1; boundary="Boundary-02=_CP2O/9Xq5ldmSIj"; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <200308141226.10856.pauldv@gentoo.org> Subject: Re: [gentoo-dev] The Free Software Foundation's FTP site at ftp.gnu.org has been"compromised" X-Archives-Salt: f6e2be05-ee25-4f93-94a8-034b8cfd6286 X-Archives-Hash: dea9b99c7031af8dd1eb59cb4a9bfba6 --Boundary-02=_CP2O/9Xq5ldmSIj Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Content-Description: signed data Content-Disposition: inline On Thursday 14 August 2003 08:00, Fred Van Andel wrote: > On August 13, 2003 10:03 pm, Georgi Georgiev wrote: > > > I dont have time now (I am at work) but can someone check the > > > dates of the affected files to see if they are potentially > > > suspect? > > > > Not good enough, is it? One can use "touch" to set the date to > > anything they want. > > Yes you can, but only a truly incompetent cracker would set the date > to be anything other than the date of the original file. The idea > is to hide the fact that the file has changed, not broadcast it. I think it is better to look when the specific digest was added to cvs. As = far=20 as I know our cvs has not been compromised. Paul =2D-=20 Paul de Vrieze Gentoo Developer Mail: pauldv@gentoo.org Homepage: http://www.devrieze.net --Boundary-02=_CP2O/9Xq5ldmSIj Content-Type: application/pgp-signature Content-Description: signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (GNU/Linux) iD8DBQA/O2PCbKx5DBjWFdsRAoR7AJ9YGGDCBySqCcfEOk8p73A39Y8lHwCfcCaW ZcFq+qrYPS3uvCroLazLtjc= =IyjI -----END PGP SIGNATURE----- --Boundary-02=_CP2O/9Xq5ldmSIj--