Gentoo Archives: gentoo-dev

From: Fred Van Andel <fava@g.o>
To: gentoo-dev@g.o
Subject: Re: [gentoo-dev] The Free Software Foundation's FTP site at ftp.gnu.org has been"compromised"
Date: Thu, 14 Aug 2003 06:00:19
Message-Id: 200308132300.15639.fava@gentoo.org
In Reply to: Re: [gentoo-dev] The Free Software Foundation's FTP site at ftp.gnu.org has been"compromised" by Georgi Georgiev
1 -----BEGIN PGP SIGNED MESSAGE-----
2 Hash: SHA1
3
4 On August 13, 2003 10:03 pm, Georgi Georgiev wrote:
5 > > I dont have time now (I am at work) but can someone check the
6 > > dates of the affected files to see if they are potentially
7 > > suspect?
8 >
9 > Not good enough, is it? One can use "touch" to set the date to
10 > anything they want.
11
12 Yes you can, but only a truly incompetent cracker would set the date
13 to be anything other than the date of the original file. The idea
14 is to hide the fact that the file has changed, not broadcast it.
15
16 - --
17 Fred Van Andel
18 fava@g.o
19 GPG KeyID: 76526AD599455482
20 GPG fingerprint: 64E4 4BAB 9C99 D565 3E3C F5D0 7652 6AD5 9945 5482
21 -----BEGIN PGP SIGNATURE-----
22 Version: GnuPG v1.2.2 (GNU/Linux)
23
24 iD8DBQE/OyVvdlJq1ZlFVIIRAsmhAKDTMPI5x/SI1cGoB71ot4M3j/RjhwCgvxEd
25 XmAHpvSEIwr5hR7bkpA+x2o=
26 =xGYQ
27 -----END PGP SIGNATURE-----
28
29
30 --
31 gentoo-dev@g.o mailing list

Replies