From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 11018 invoked by alias); 14 Feb 2009 13:34:33 -0000 Received: (qmail 11009 invoked by uid 22791); 14 Feb 2009 13:34:32 -0000 X-SWARE-Spam-Status: No, hits=-2.1 required=5.0 tests=AWL,BAYES_00,SPF_PASS,WHOIS_NETSOLPR X-Spam-Check-By: sourceware.org Received: from mail-ew0-f11.google.com (HELO mail-ew0-f11.google.com) (209.85.219.11) by sourceware.org (qpsmtpd/0.43rc1) with ESMTP; Sat, 14 Feb 2009 13:34:26 +0000 Received: by ewy4 with SMTP id 4so1437656ewy.2 for ; Sat, 14 Feb 2009 05:34:23 -0800 (PST) Received: by 10.210.127.13 with SMTP id z13mr2557765ebc.141.1234618463501; Sat, 14 Feb 2009 05:34:23 -0800 (PST) Received: from ?82.6.108.62? (cpc2-cmbg8-0-0-cust61.cmbg.cable.ntl.com [82.6.108.62]) by mx.google.com with ESMTPS id q9sm5906025gve.15.2009.02.14.05.34.22 (version=SSLv3 cipher=RC4-MD5); Sat, 14 Feb 2009 05:34:22 -0800 (PST) Message-ID: <4996C682.3040604@gmail.com> Date: Sat, 14 Feb 2009 13:34:00 -0000 From: Dave Korn User-Agent: Thunderbird 2.0.0.17 (Windows/20080914) MIME-Version: 1.0 To: The Vaguely on Topic Cygwin-Talk List Subject: Re: irritating forum References: <20090214042751.GA28495@ednor.casa.cgf.cx>, <49965C15.5050109@gmail.com> <499671E1.28994.67A4EF74@wess.acegroup.cc> In-Reply-To: <499671E1.28994.67A4EF74@wess.acegroup.cc> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Mailing-List: contact cygwin-talk-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Post: List-Help: , Sender: cygwin-talk-owner@cygwin.com Reply-To: The Vulgar and Unprofessional Cygwin-Talk List X-SW-Source: 2009-q1/txt/msg00026.txt.bz2 Wes S wrote: > On 14 Feb 2009 at 5:52, Dave Korn wrote: > >> Christopher Faylor wrote: >>> http://www.physicsforums.com/showthread.php?t=291923 >> I went and opened a polite dialogue with them. Somebody do remind >> me to >> check back in a day or so, or I might forget. >> >> [ I might have launched a full-out nuclear flame war instead, but >> they've >> blocked bugmenot, so I decided to play nice :) ] >> >> cheers, >> DaveK > > Correct me if I'm wrong but setup.exe does some sort of hash check to > make sure that packages uploaded from mirrors are valid? I only read > so much of that link you posted before deciding this was clueless > rant. Oh, well, hippos, blah blah, on the moon, blah blah, weird surreal wibble blah blah . . *sotto voce* Yes, it does. The setup.ini file is digitally signed on sourceware.org, and it lists the md5sums of all the packages, so those can be verified under guarantee of the signature. But don't let the hippos hear us having an on-topic conversation here in their territory, or they'll be angry, that's why I'm whispering. Say, what's that distand whistling noise? And why is everyone backing away from me and looking up? Oh, no ..... weeeeeeeeeeeeeeeeekkkkeeeeeeeerSPSPLLLAAAATTTTHUMP ##@NO CARRIER