From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from relay7-d.mail.gandi.net (relay7-d.mail.gandi.net [IPv6:2001:4b98:dc4:8::227]) by sourceware.org (Postfix) with ESMTPS id A60433834E2C for ; Fri, 9 Dec 2022 11:39:29 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org A60433834E2C Authentication-Results: sourceware.org; dmarc=none (p=none dis=none) header.from=oskog97.com Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=oskog97.com Received: (Authenticated sender: oskar@oskog97.com) by mail.gandi.net (Postfix) with ESMTPSA id E76172000F for ; Fri, 9 Dec 2022 11:39:27 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oskog97.com; s=gm1; t=1670585968; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references:autocrypt:autocrypt; bh=zGedSfM860LMVxbx8WY3zRZ53ljn+9HwrXDh6e5El9E=; b=gAL976RFn8/yejBBTRY7a71pJ93CNHRDqCGqratADtoVIbRB1ynYKFYeCirdXqNkV7os9l KT/Di4C0HlpL1NJoKTwnZjsAwDT8vdWlbCuYp9jFBiTA/0kp81iETovB8IzOAQSDFWab0R jjioeexhwVNmpjccEJAehFuJI0GFByDg23IMAjcVZyN/RFpX3uoXvxkBHpR6PnOqSEm42H tfZg4/jCZAXLfUdTd0yafnsQmYroIDV8+tVCveX6GU2qMef6IwcbMtDMiWP0zFZQqzfm1J 9aoZ7VqXPjGat8tSQWE3/bFW7/jkgWwLOMUpFK1dFQOGwxvhRgyIv2plLVQnSw== Message-ID: <6e721522-7e4a-d0d9-f928-4bc6e1b34f3f@oskog97.com> Date: Fri, 9 Dec 2022 13:39:26 +0200 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.5.0 Subject: Re: Cygwin setup reporter as malware Content-Language: en-US To: cygwin@cygwin.com References: <14e7843a-5829-2c74-313b-13d08b37243e@harkless.org> From: Oskar Skog Autocrypt: addr=oskar@oskog97.com; keydata= xsDNBGEAC0sBDAC0OAn2v+2+NFLk3/HtLlkfTRPjn7UY2v700hl7Y3KsxKFfbngPlHqPOKs+ hLd3kiDyV6fZwTFaLR4JWAFPpEK2b9rY1p9WKKvGn1Nu/NZlPEoHfk9rVphCHKuOiw1oA97/ /rBXum+h7YsVava3QdVU9fh+eFuaeWX+I2rVXo7YOmaSvW4tkuk3MJP6M9UNynv2hSF3+/Nm knKD5uwe9we3XC3b4O3b6i1sXmjt+7aqNcZbml7QAuqTHss3NVsrwOUVtduz125xQtNmX/z9 3BL8W7Qv4nrKKO172+GY2yBLkyvSRvG/FWJNdD2Cp6zAwjukDY8vZEcowtVbVUHXX5NsQOcO IMaXyKewoZJEByjD09nooeavpuGr4DPuPznuzTPF+LsqbfSYpIRvAR6xwk+jvgH4Vmh65C1/ q/0kbs7yQZ4iHZotyvP2SKSfrQEwFAoeWdRzrqTB9LfDn9AuCasxFr3jF6RutCgT4XSnlHIE Liz18ohPL7DHJAwCvHzEJLUAEQEAAc0eT3NrYXIgU2tvZyA8b3NrYXJAb3Nrb2c5Ny5jb20+ wsEPBBMBCAA5FiEEQtZagxq7BWVG4ZGeRzzQXHhzTkkFAmEAC0wFCQWjmoACGwMFCwkIBwIG FQgJCgsCBRYCAwEAAAoJEEc80Fx4c05JGvsL/R5nUkMAYabIAdPnRacoSicChKahwtHIXDoI 4oe+aildlVL1Tt9JnKz7JMD8r0+dvQPuS0q0P2ztBjhtAjewgH7D2nN6+pelOGI93xlZ3S5V 4soD5yIuVUE/T45qwwF4531u1r0yr+RbXpvfliEb1igC8IhqYvSyRb55Av8GUkcWd4IQTnnR z0zvJm/QvVZHrlDvuI7vSqn4A+CNclR/0EJz/jSW2TNiVVwrAtd8oIgjEMwzNVPUo2Jf8K3x VWIZbliMRcOYVCA1oD+YAhCEDcdPRAxi5ZuyZLlJOvB4f/bJmgZtuv/yQ5GZHdCv5/yWeHuv 169pfF0ENRCPi6KS8qE2WqagoHBEDMWfwK/x1o6X2z0LZeK+WmTLg7pLkrvqOzqHLdJlckip XmHfskHtLY3toMvs1GGTgwghGmcwF2ks+2a7QI/NNO9Q6X3yzm9WMgWrNIhwZA8ZLWpNsquJ cSPygmsfpwj7dc/COI0nQQ3ccqks/hzYIyODJvu8MpB08c7AzQRhAAtMAQwAw4p0RKHDOIKy iboUUXnyPx4hSWmawg75i7XJP2AcluT9WCQgwzZCJUqhL8E0bcWFjPyba7RRDJ82Ojw7Xtbg f4eAizBT2kyFmIYxHJ70aUXb8AvwXezG/MuXx4bEOrbngQeaWgaJci3sGEvzEVoGGj001xaC 7LSUdxQdcLoPySvFFSA7IEpnCyXZtPjxISNMPg7J7cmhaKjma5XuHdySGPnHm8QuQ8pPYSdC XG87VojUQr/Rg5iAie/iRna08OhzVHPMemwkmMnD2P4OWiu4hPGUPTSn4iDg09Rv14f0rgHp Rrp3aW8fQi9Nalb0l8gn9jPoK/XoYAKty1Y+sT8RhYkXu81TUa+3LFNLMGFWAxCwVPhZHtH7 dMvuZvhjhrF6rChFIOFFSLQvKhhzRFCqfZmHsbnJjsCYfpks4nyUenRH6UUS1sWUH/v0uDRx vBuHnRT8S2E/j8zJcicXx5os3Dyz8/Vc1SappARRu+8faeAnNmMXRLVQH75M+QInRoJXABEB AAHCwPwEGAEIACYWIQRC1lqDGrsFZUbhkZ5HPNBceHNOSQUCYQALTQUJBaOagAIbDAAKCRBH PNBceHNOSRzTC/42QaJkro+7wJr6l3J3Hoqnx2WxB5ZKMY5CnhDgLu/xZGUdUvNvYFjtXp6J mWZsK0fXPB7mMES4HfLs70K4jnrJHXz+74FWdUbsCBRmSiziBoXpIHKoOhRO917NxLozvMO7 b7H1mEI1hldyPLKKNP3o10GrJlvK8YcY/8zw9eHaxzFJO0nt+zw5S49AiYJWIsKrZp+gOfas FkPfkgOI2Ii0GnpTC5vgtmzSRmFNQLj6JijU9iShStUF2FlgkhehBtLL0Bym3N5E7fzsOeSz kqYi24Vi+CUUcVjFPbp2fXVznsZYJ/ncxWOBUVZ1G4gFHC+/NVoGOJvUCu1H8VFdfHgpopmw 6SeFhv4k0KqNrEN4I+514qtTA/MFVYh3LT2G9wHS5YDLCLdrTZpcbU/JtmpO6Kn5prdCcZOe bzK7KRxrZcsB9Dcva8DIYhPSXb7r/DLprnzTGUoWtfzmzYKnPaOBwWhGtZBaFYsgWfyaFS2d jFn1+Kr1tXF/I5ay0b4v3u4= In-Reply-To: <14e7843a-5829-2c74-313b-13d08b37243e@harkless.org> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------i7quFYzRhnc3WHTiaeGIL4wA" X-Spam-Status: No, score=-3.1 required=5.0 tests=BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,NICE_REPLY_A,RCVD_IN_DNSWL_LOW,SPF_HELO_NONE,SPF_PASS,TXREP autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------i7quFYzRhnc3WHTiaeGIL4wA Content-Type: multipart/mixed; boundary="------------l1MBosapqh6TQiDskUPIMjae"; protected-headers="v1" From: Oskar Skog To: cygwin@cygwin.com Message-ID: <6e721522-7e4a-d0d9-f928-4bc6e1b34f3f@oskog97.com> Subject: Re: Cygwin setup reporter as malware References: <14e7843a-5829-2c74-313b-13d08b37243e@harkless.org> In-Reply-To: <14e7843a-5829-2c74-313b-13d08b37243e@harkless.org> --------------l1MBosapqh6TQiDskUPIMjae Content-Type: multipart/mixed; boundary="------------EuI1JZV00SNLXUvSyXMy5Bpj" --------------EuI1JZV00SNLXUvSyXMy5Bpj Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 T24gMjAyMi0xMi0wNyAyMzo1NCwgRGFuIEhhcmtsZXNzIHZpYSBDeWd3aW4gd3JvdGU6DQoN Cj4gTm8uwqAgSXQncyBub3JtYWwgYW5kIGNvbW1vbiBmb3Igc29mdHdhcmUgbGlrZSBDeWd3 aW4sIHdoaWNoIGhhcyB0aGUgDQo+IHBvd2VyIHRvIGJlIHVzZWQgbWFsaWNpb3VzbHkgKGFz IG9wcG9zZWQgdG8sIHNheSwgYSBNaW5lc3dlZXBlciBnYW1lIG9yIA0KPiBzb21ldGhpbmcp LCB0byBoYXZlIGZhbHNlIHBvc2l0aXZlcyBvbiBWaXJ1c1RvdGFsIGZvciBhIGhhbmRmdWwg b2YgDQo+IHZlbmRvcnMuwqAgSSd2ZSBuZXZlciBoZWFyZCBvZiBTZWN1cmVBZ2Ugb3IgVHJh cG1pbmUgKGhtbSwgbWF5YmUgaXQgDQo+ICp3b3VsZCogZmxhZyBNaW5lc3dlZXBlci4uLiks IGFuZCBJJ20gcHJldHR5IHdlbGwgZWR1Y2F0ZWQgaW4gdGhlIA0KPiBhbnRpLW1hbHdhcmUg c3BhY2UsIHNvIGlmIGl0IHdlcmUgbWUsIEknZCBqdXN0IGlnbm9yZSB0aG9zZSBmYWxzZSAN Cj4gcG9zaXRpdmVzIGFuZCBwYXkgYXR0ZW50aW9uIHRvIHRoZSBjcmVkaWJsZSBBViBzb2Z0 d2FyZSByZXN1bHRzIChhbmQgdGhlIA0KPiBDb21tdW5pdHkgU2NvcmUpLg0KDQoNCllvdSBt YXkgaGF2ZSB0aG91Z2h0IHlvdSB3ZXJlIGpva2luZywgYnV0Li4uDQoNCmh0dHBzOi8vd3d3 LnZpcnVzdG90YWwuY29tL2d1aS9maWxlL2JjZmY4OTMxMWQ3OTJmNjQyODQ2OGU4MTNhYzY5 MjlhMzQ2YTk3OWY5MDcwNzFjMzAyZjQxOGQxMjhlYWFmNDENCg0KVGhpcyBpcyBub3QganVz dCAqYSogbWluZXN3ZWVwZXIgZ2FtZSwgaXQgaXMgKnRoZSogbWluZXN3ZWVwZXIgZ2FtZQ0K ZnJvbSBXaW5kb3cgWFAuDQo= --------------EuI1JZV00SNLXUvSyXMy5Bpj Content-Type: application/pgp-keys; name="OpenPGP_0x473CD05C78734E49.asc" Content-Disposition: attachment; filename="OpenPGP_0x473CD05C78734E49.asc" Content-Description: OpenPGP public key Content-Transfer-Encoding: quoted-printable -----BEGIN PGP PUBLIC KEY BLOCK----- xsDNBGEAC0sBDAC0OAn2v+2+NFLk3/HtLlkfTRPjn7UY2v700hl7Y3KsxKFfbngP lHqPOKs+hLd3kiDyV6fZwTFaLR4JWAFPpEK2b9rY1p9WKKvGn1Nu/NZlPEoHfk9r VphCHKuOiw1oA97//rBXum+h7YsVava3QdVU9fh+eFuaeWX+I2rVXo7YOmaSvW4t kuk3MJP6M9UNynv2hSF3+/NmknKD5uwe9we3XC3b4O3b6i1sXmjt+7aqNcZbml7Q AuqTHss3NVsrwOUVtduz125xQtNmX/z93BL8W7Qv4nrKKO172+GY2yBLkyvSRvG/ FWJNdD2Cp6zAwjukDY8vZEcowtVbVUHXX5NsQOcOIMaXyKewoZJEByjD09nooeav puGr4DPuPznuzTPF+LsqbfSYpIRvAR6xwk+jvgH4Vmh65C1/q/0kbs7yQZ4iHZot yvP2SKSfrQEwFAoeWdRzrqTB9LfDn9AuCasxFr3jF6RutCgT4XSnlHIELiz18ohP L7DHJAwCvHzEJLUAEQEAAc0eT3NrYXIgU2tvZyA8b3NrYXJAb3Nrb2c5Ny5jb20+ wsEPBBMBCAA5FiEEQtZagxq7BWVG4ZGeRzzQXHhzTkkFAmEAC0wFCQWjmoACGwMF CwkIBwIGFQgJCgsCBRYCAwEAAAoJEEc80Fx4c05JGvsL/R5nUkMAYabIAdPnRaco SicChKahwtHIXDoI4oe+aildlVL1Tt9JnKz7JMD8r0+dvQPuS0q0P2ztBjhtAjew gH7D2nN6+pelOGI93xlZ3S5V4soD5yIuVUE/T45qwwF4531u1r0yr+RbXpvfliEb 1igC8IhqYvSyRb55Av8GUkcWd4IQTnnRz0zvJm/QvVZHrlDvuI7vSqn4A+CNclR/ 0EJz/jSW2TNiVVwrAtd8oIgjEMwzNVPUo2Jf8K3xVWIZbliMRcOYVCA1oD+YAhCE DcdPRAxi5ZuyZLlJOvB4f/bJmgZtuv/yQ5GZHdCv5/yWeHuv169pfF0ENRCPi6KS 8qE2WqagoHBEDMWfwK/x1o6X2z0LZeK+WmTLg7pLkrvqOzqHLdJlckipXmHfskHt LY3toMvs1GGTgwghGmcwF2ks+2a7QI/NNO9Q6X3yzm9WMgWrNIhwZA8ZLWpNsquJ cSPygmsfpwj7dc/COI0nQQ3ccqks/hzYIyODJvu8MpB08c7AzQRhAAtMAQwAw4p0 RKHDOIKyiboUUXnyPx4hSWmawg75i7XJP2AcluT9WCQgwzZCJUqhL8E0bcWFjPyb a7RRDJ82Ojw7Xtbgf4eAizBT2kyFmIYxHJ70aUXb8AvwXezG/MuXx4bEOrbngQea WgaJci3sGEvzEVoGGj001xaC7LSUdxQdcLoPySvFFSA7IEpnCyXZtPjxISNMPg7J 7cmhaKjma5XuHdySGPnHm8QuQ8pPYSdCXG87VojUQr/Rg5iAie/iRna08OhzVHPM emwkmMnD2P4OWiu4hPGUPTSn4iDg09Rv14f0rgHpRrp3aW8fQi9Nalb0l8gn9jPo K/XoYAKty1Y+sT8RhYkXu81TUa+3LFNLMGFWAxCwVPhZHtH7dMvuZvhjhrF6rChF IOFFSLQvKhhzRFCqfZmHsbnJjsCYfpks4nyUenRH6UUS1sWUH/v0uDRxvBuHnRT8 S2E/j8zJcicXx5os3Dyz8/Vc1SappARRu+8faeAnNmMXRLVQH75M+QInRoJXABEB AAHCwPwEGAEIACYWIQRC1lqDGrsFZUbhkZ5HPNBceHNOSQUCYQALTQUJBaOagAIb DAAKCRBHPNBceHNOSRzTC/42QaJkro+7wJr6l3J3Hoqnx2WxB5ZKMY5CnhDgLu/x ZGUdUvNvYFjtXp6JmWZsK0fXPB7mMES4HfLs70K4jnrJHXz+74FWdUbsCBRmSizi BoXpIHKoOhRO917NxLozvMO7b7H1mEI1hldyPLKKNP3o10GrJlvK8YcY/8zw9eHa xzFJO0nt+zw5S49AiYJWIsKrZp+gOfasFkPfkgOI2Ii0GnpTC5vgtmzSRmFNQLj6 JijU9iShStUF2FlgkhehBtLL0Bym3N5E7fzsOeSzkqYi24Vi+CUUcVjFPbp2fXVz nsZYJ/ncxWOBUVZ1G4gFHC+/NVoGOJvUCu1H8VFdfHgpopmw6SeFhv4k0KqNrEN4 I+514qtTA/MFVYh3LT2G9wHS5YDLCLdrTZpcbU/JtmpO6Kn5prdCcZOebzK7KRxr ZcsB9Dcva8DIYhPSXb7r/DLprnzTGUoWtfzmzYKnPaOBwWhGtZBaFYsgWfyaFS2d jFn1+Kr1tXF/I5ay0b4v3u4=3D =3D7WXY -----END PGP PUBLIC KEY BLOCK----- --------------EuI1JZV00SNLXUvSyXMy5Bpj-- --------------l1MBosapqh6TQiDskUPIMjae-- --------------i7quFYzRhnc3WHTiaeGIL4wA Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature" -----BEGIN PGP SIGNATURE----- wsD5BAABCAAjFiEEQtZagxq7BWVG4ZGeRzzQXHhzTkkFAmOTHm4FAwAAAAAACgkQRzzQXHhzTknO agv+KrONT1uiTmtmccb8mhyvlM8sksSHD9QMzuZDgmf7XiXoB5Luq1YXhzOmORHjDsvfqiqPkQEz Sbog7wdU1uUMqu3meAN292nEwbHdWBbIhrpisLcFqgcj8me3cM3ewEwMqslrWp3KnQigvVtDgooJ H3EvME0FPMJvVifq+1ExbxeW0Xku6iU0HUNmsyfXrgY06u8wSZTgqwfhwwIUVwzfWM62y7IWXTTC fE3nK5dPtr9+LLRZOOlyEVn3B6lhx6TPR2ZpQE1LgG2XXXukPAkXsXr2PUdY3j0BaTpLNMCAZxsi ZvVMfa6Y23vKJbhOOT5PlWOSuxE5WfUBnOpeWnAL4UcBZ7oGZM/hldPRL4q0qnA2z+nYejD6JGGY gtDeVar3qkcrRFzL0fXuLATOyV8T4l1k9Yoed+vbax9Zx3cvpBK7NSpcEvoHoSPVYxSkHb6Hq5Ji JlNG7JWS01Ag2E12+flt2z8fxszPMVliUf53GQTc3WbWl6PJxYdTPlLvuVcD =+3SO -----END PGP SIGNATURE----- --------------i7quFYzRhnc3WHTiaeGIL4wA--