Re: CERT Advisory CA-2002-28 Trojan Horse Sendmail Distribution
Sam Halliday <[email protected]>
| Newsgroups | gmane.linux.lfs.security |
|---|---|
| Message-ID | <[email protected]> |
On 10 Oct 2002 12:10:03 -0600 Ken Dyke <[email protected]> wrote: > I know how. And now it is in the mail archives if it wasn't before. > Files can also be checked with > md5sum foo.bar > then check the hash against the published md5 signature. The md5 > checksum for gnupg can be found on http://www.gnupg.org/download.html but this is insecure... if the ftp site has been hacked, chances are that the md5sum has been also... only trust md5sums which have been signed. Sam -- A narcissist is someone better looking than you are. -- Gore Vidal -- Unsubscribe: send email to [email protected] and put 'unsubscribe lfs-security' in the subject header of the message