Date: Wed, 26 Apr 2006 10:09:18 +1000 From: Edwin Groothuis <edwin@mavetju.org> To: Vivek Khera <vivek@khera.org> Cc: ports@freebsd.org Subject: Re: shells/bash: Checksum mismatch for bash/bash31-010. Message-ID: <20060426000918.GA1113@k7.mavetju> In-Reply-To: <D3A2B28F-7B29-4318-8B5A-ED7BA6FAD1D8@khera.org> References: <20060425134638.GA32017@math.uvsq.fr> <20060425135835.GA47488@math.uvsq.fr> <D3A2B28F-7B29-4318-8B5A-ED7BA6FAD1D8@khera.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Apr 25, 2006 at 10:14:33AM -0400, Vivek Khera wrote: > I did a "make distclean" in the ports dir, but it worries me that the > checksum of this file has changed. It is just plain bad practice and > style to re-release a source distribution like that with the exact > same file name. It more or less totally defeats the purpose of > having checksums like this to detect transmission errors and or > compromised software (like when openssh was hacked a while back). That is exactly the reason why checksums are useful. Edwin -- Edwin Groothuis | Personal website: http://www.mavetju.org edwin@mavetju.org | Weblog: http://weblog.barnet.com.au/edwin/
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060426000918.GA1113>