From owner-cvs-all Fri Jun 9 17: 1: 5 2000 Delivered-To: cvs-all@freebsd.org Received: from relay.nuxi.com (nuxi.cs.ucdavis.edu [169.237.7.38]) by hub.freebsd.org (Postfix) with ESMTP id 46A0037C5C7; Fri, 9 Jun 2000 17:01:00 -0700 (PDT) (envelope-from obrien@NUXI.com) Received: from dragon.nuxi.com (root@trang.nuxi.com [209.152.133.57]) by relay.nuxi.com (8.9.3/8.9.3) with ESMTP id RAA03841; Fri, 9 Jun 2000 17:00:59 -0700 (PDT) (envelope-from obrien@dragon.nuxi.com) Received: (from obrien@localhost) by dragon.nuxi.com (8.9.3/8.9.1) id RAA62067; Fri, 9 Jun 2000 17:01:25 -0700 (PDT) (envelope-from obrien) Date: Fri, 9 Jun 2000 17:01:25 -0700 From: "David O'Brien" To: Brian Fundakowski Feldman Cc: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: ports/comms/minicom/files md5 Message-ID: <20000609170125.B62028@dragon.nuxi.com> Reply-To: obrien@FreeBSD.org References: <200006091911.MAA57180@freefall.freebsd.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2i In-Reply-To: ; from green@FreeBSD.org on Fri, Jun 09, 2000 at 05:21:20PM -0400 X-Operating-System: FreeBSD 5.0-CURRENT Organization: The NUXI BSD group X-PGP-Fingerprint: B7 4D 3E E9 11 39 5F A3 90 76 5D 69 58 D9 98 7A X-Pgp-Keyid: 34F9F9D5 Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Fri, Jun 09, 2000 at 05:21:20PM -0400, Brian Fundakowski Feldman wrote: > The diffing-to-find-what-makes-an-md5-change practice is a good > thing, but how good is it really when the MD5 from a new version is > generated and we act on blind trust? That happens more often than > bouncing md5 hashes, so isn't there even _more_ of a chance of a trojan > coming in? EXACTLY. Except on one but me understood this on IRC. -- -- David (obrien@FreeBSD.org) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message