[gentoo-hardened] Re: [gentoo-dev] The Free Software Foundation's FTP site at ftp.gnu.org has been"compromised"

[Ned Ludd]

FSF posted a summary of what happend to them here
http://ftp.gnu.org/MISSING-FILES.README

I compared the md5sum's of the files I had in my (2.1 G) distfiles to
the md5sums they posted and they all matched thankfully.

heres a url to the simple bash script I used to compare the checksums
http://dev.gentoo.org/~solar/gnu.md5sum.check

On Thu, 2003-08-14 at 06:26, Paul de Vrieze wrote:
> On Thursday 14 August 2003 08:00, Fred Van Andel wrote:
> > On August 13, 2003 10:03 pm, Georgi Georgiev wrote:
> > > > I dont have time now (I am at work) but can someone check the
> > > > dates of the affected files to see if they are potentially
> > > > suspect?
> > >
> > > Not good enough, is it? One can use "touch" to set the date to
> > > anything they want.
> >
> > Yes you can, but only a truly incompetent cracker would set the date
> > to be anything other than the date of the original file. The idea
> > is to hide the fact that the file has changed, not broadcast it.
>
> I think it is better to look when the specific digest was added to cvs. As far
> as I know our cvs has not been compromised.
>
> Paul
-- 
Ned Ludd <solar@g.o>
Gentoo Linux Developer (Hardened)


--
gentoo-hardened@g.o mailing list