Gentoo Archives: gentoo-dev

From: Paul de Vrieze <pauldv@g.o>
To: gentoo-dev@g.o
Subject: Re: [gentoo-dev] The Free Software Foundation's FTP site at ftp.gnu.org has been"compromised"
Date: Thu, 14 Aug 2003 10:26:12
Message-Id: 200308141226.10856.pauldv@gentoo.org
In Reply to: Re: [gentoo-dev] The Free Software Foundation's FTP site at ftp.gnu.org has been"compromised" by Fred Van Andel
1 On Thursday 14 August 2003 08:00, Fred Van Andel wrote:
2 > On August 13, 2003 10:03 pm, Georgi Georgiev wrote:
3 > > > I dont have time now (I am at work) but can someone check the
4 > > > dates of the affected files to see if they are potentially
5 > > > suspect?
6 > >
7 > > Not good enough, is it? One can use "touch" to set the date to
8 > > anything they want.
9 >
10 > Yes you can, but only a truly incompetent cracker would set the date
11 > to be anything other than the date of the original file. The idea
12 > is to hide the fact that the file has changed, not broadcast it.
13
14 I think it is better to look when the specific digest was added to cvs. As far
15 as I know our cvs has not been compromised.
16
17 Paul
18
19 --
20 Paul de Vrieze
21 Gentoo Developer
22 Mail: pauldv@g.o
23 Homepage: http://www.devrieze.net

Replies