Cygwin CD question

Cygwin CD question

[William V. Nicholson]

I notice from the information on the Redhat website and in the FAQ that
there is no Cygwin CD.  I am interested in using Cygwin; but I don't
believe I require the Cygwin license for my applications.  I have
previously used Cygwin by downloading it; but I encountered some
difficulties with the setup program, especially for downloading source
code.  (It crashed when I chose the source code option for some packages.)
Actually, one reason that I am interested in using Cygwin is in order to
run free integrity checking software like Tripwire and ViperDB that works
under Unix.  (There is a Tripwire for Windows; but it isn't free.)  There
are security issues with downloading Cygwin before installing ViperDB or
similar software under Cygwin and that is why I am interested in obtaining
Cygwin by CD.  (My current workaround is just to download Cygwin using the
fastest connection available and then burn a CD although that doesn't
solve the problem with downloading source code),
William Nicholson


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: Cygwin CD question

[Larry Hall (RFK Partners, Inc)]

At 02:31 PM 5/13/2002, William V. Nicholson wrote:

>I notice from the information on the Redhat website and in the FAQ that
>there is no Cygwin CD.  I am interested in using Cygwin; but I don't
>believe I require the Cygwin license for my applications.  I have
>previously used Cygwin by downloading it; but I encountered some
>difficulties with the setup program, especially for downloading source
>code.  (It crashed when I chose the source code option for some packages.)


If you haven't tried it recently, try it again.  Report specifics of any
problems you may encounter here.


>Actually, one reason that I am interested in using Cygwin is in order to
>run free integrity checking software like Tripwire and ViperDB that works
>under Unix.  (There is a Tripwire for Windows; but it isn't free.)  


You must realize that Cygwin doesn't allow you to run a generic UNIX binary,
right?  Cygwin is a layer over Win32 providing a POSIX environment, not a 
UNIX binary emulator.


>There
>are security issues with downloading Cygwin before installing ViperDB or
>similar software under Cygwin and that is why I am interested in obtaining
>Cygwin by CD.  (My current workaround is just to download Cygwin using the
>fastest connection available and then burn a CD although that doesn't
>solve the problem with downloading source code),


Actually, if you're having some problem with setup that can't be solved, you
can download Cygwin in it's entirety using wget or similar tools.  From that,
you can burn a CD and/or install locally.  Anyone providing such a CD to you
would take a similar approach.



Larry Hall                              lhall@rfk.com
RFK Partners, Inc.                      http://www.rfk.com
838 Washington Street                   (508) 893-9779 - RFK Office
Holliston, MA 01746                     (508) 893-9889 - FAX


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: Cygwin CD question

[William V. Nicholson]

Okay, thank you very much.  I will tell you if I have problems with the
setup program, especially with downloading the Cygwin packages' source
code,
William



On Mon, 13 May 2002, Larry Hall (RFK Partners, Inc) wrote:

> At 02:31 PM 5/13/2002, William V. Nicholson wrote:
>
> >I notice from the information on the Redhat website and in the FAQ that
> >there is no Cygwin CD.  I am interested in using Cygwin; but I don't
> >believe I require the Cygwin license for my applications.  I have
> >previously used Cygwin by downloading it; but I encountered some
> >difficulties with the setup program, especially for downloading source
> >code.  (It crashed when I chose the source code option for some packages.)
>
>
> If you haven't tried it recently, try it again.  Report specifics of any
> problems you may encounter here.
>
>
> >Actually, one reason that I am interested in using Cygwin is in order to
> >run free integrity checking software like Tripwire and ViperDB that works
> >under Unix.  (There is a Tripwire for Windows; but it isn't free.)
>
>
> You must realize that Cygwin doesn't allow you to run a generic UNIX binary,
> right?  Cygwin is a layer over Win32 providing a POSIX environment, not a
> UNIX binary emulator.
>
>
> >There
> >are security issues with downloading Cygwin before installing ViperDB or
> >similar software under Cygwin and that is why I am interested in obtaining
> >Cygwin by CD.  (My current workaround is just to download Cygwin using the
> >fastest connection available and then burn a CD although that doesn't
> >solve the problem with downloading source code),
>
>
> Actually, if you're having some problem with setup that can't be solved, you
> can download Cygwin in it's entirety using wget or similar tools.  From that,
> you can burn a CD and/or install locally.  Anyone providing such a CD to you
> would take a similar approach.
>
>
>
> Larry Hall                              lhall@rfk.com
> RFK Partners, Inc.                      http://www.rfk.com
> 838 Washington Street                   (508) 893-9779 - RFK Office
> Holliston, MA 01746                     (508) 893-9889 - FAX
>
>


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: Cygwin CD question

[Harold L Hunt]

William,

Your post makes close to no sense.

> I am interested in using Cygwin; but I don't
> believe I require the Cygwin license for my applications.  

Huh?  Explain that one... no wait I'll spare us all: don't explain that one.

> I have
> previously used Cygwin by downloading it; but I encountered some
> difficulties with the setup program, especially for downloading source
> code.

Then try downloading again.  Select a different mirror site this time and 
make sure that you have the latest setup.exe: http://cygwin.com/setup.exe

> There
> are security issues with downloading Cygwin before installing ViperDB or
> similar software under Cygwin and that is why I am interested in obtaining
> Cygwin by CD.

What?!?  Security issues?!?

If you need Cygwin on a CD I'll be glad to sell the service of creating one 
for you for $300.  Cash or check.  No COD.

> My current workaround is just to download Cygwin using the
> fastest connection available and then burn a CD although that doesn't
> solve the problem with downloading source code)

It sure does solve the problem.  Choose the "Download from Internet" option 
on the second screen of setup.  Set the package directory to a temporary 
directory that contains setup.exe, then burn that directory to a CD.  Problem 
solved.


Harold




--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: Cygwin CD question

[William V. Nicholson]

The point is that if you are really paranoid about these things then
someone might slip in a trojan or backdoor while you are downloading
Cygwin.  Obviously, if you subsequently set up an integrity tool then your
system together with the backdoor would check out as okay (possibly until
it got infected with a second backdoor or whatever).
I don't really have those kind of security requirements but I like to do
things right if I can; but I'll just accept that I have to download it,
Thanks,
William


On Mon, 13 May 2002, Harold L Hunt wrote:

>
> > There
> > are security issues with downloading Cygwin before installing ViperDB or
> > similar software under Cygwin and that is why I am interested in obtaining
> > Cygwin by CD.
>
> What?!?  Security issues?!?
>
> If you need Cygwin on a CD I'll be glad to sell the service of creating one
> for you for $300.  Cash or check.  No COD.
>
> > My current workaround is just to download Cygwin using the
> > fastest connection available and then burn a CD although that doesn't
> > solve the problem with downloading source code)
>
> It sure does solve the problem.  Choose the "Download from Internet" option
> on the second screen of setup.  Set the package directory to a temporary
> directory that contains setup.exe, then burn that directory to a CD.  Problem
> solved.
>
>
> Harold
>
>
>
>




--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: cygwin CD question

[Christopher Faylor]

On Mon, May 13, 2002 at 02:11:08PM -0700, William V. Nicholson wrote:
>The point is that if you are really paranoid about these things then
>someone might slip in a trojan or backdoor while you are downloading
>Cygwin.  Obviously, if you subsequently set up an integrity tool then
>your system together with the backdoor would check out as okay
>(possibly until it got infected with a second backdoor or whatever).

So, the alternative is to trust that someone else has better security
than you do and trust their CD offering?

That doesn't sound paranoid enough to me.

All of the packages come with md5 checksums.  You should be able to
confirm that there are no problems with what you've downloaded by
comparing the checksums.

cgf

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

RE: cygwin CD question

[Gary R. Van Sickle]

> On Mon, May 13, 2002 at 02:11:08PM -0700, William V. Nicholson wrote:
> >The point is that if you are really paranoid about these things then
> >someone might slip in a trojan or backdoor while you are downloading
> >Cygwin.  Obviously, if you subsequently set up an integrity tool then
> >your system together with the backdoor would check out as okay
> >(possibly until it got infected with a second backdoor or whatever).
> 
> So, the alternative is to trust that someone else has better security
> than you do and trust their CD offering?
> 
> That doesn't sound paranoid enough to me.

Like I always say, you can never be too paranoid.

Can you?

-- 
Gary R. Van Sickle
Brewer.  Patriot. 
;-)

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: Cygwin CD question

[Harold L Hunt]

Larry,

Geez, you forgot to offer to sell him the Brooklyn Bridge, like I did :)

Harold

"Larry Hall (RFK Partners, Inc)" <lhall@rfk.com> said:

> At 02:31 PM 5/13/2002, William V. Nicholson wrote:
> 
> >I notice from the information on the Redhat website and in the FAQ that
> >there is no Cygwin CD.  I am interested in using Cygwin; but I don't
> >believe I require the Cygwin license for my applications.  I have
> >previously used Cygwin by downloading it; but I encountered some
> >difficulties with the setup program, especially for downloading source
> >code.  (It crashed when I chose the source code option for some packages.)
> 
> 
> If you haven't tried it recently, try it again.  Report specifics of any
> problems you may encounter here.
> 
> 
> >Actually, one reason that I am interested in using Cygwin is in order to
> >run free integrity checking software like Tripwire and ViperDB that works
> >under Unix.  (There is a Tripwire for Windows; but it isn't free.)  
> 
> 
> You must realize that Cygwin doesn't allow you to run a generic UNIX binary,
> right?  Cygwin is a layer over Win32 providing a POSIX environment, not a 
> UNIX binary emulator.
> 
> 
> >There
> >are security issues with downloading Cygwin before installing ViperDB or
> >similar software under Cygwin and that is why I am interested in obtaining
> >Cygwin by CD.  (My current workaround is just to download Cygwin using the
> >fastest connection available and then burn a CD although that doesn't
> >solve the problem with downloading source code),
> 
> 
> Actually, if you're having some problem with setup that can't be solved, you
> can download Cygwin in it's entirety using wget or similar tools.  From 
that,
> you can burn a CD and/or install locally.  Anyone providing such a CD to you
> would take a similar approach.
> 
> 
> 
> Larry Hall                              lhall@rfk.com
> RFK Partners, Inc.                      http://www.rfk.com
> 838 Washington Street                   (508) 893-9779 - RFK Office
> Holliston, MA 01746                     (508) 893-9889 - FAX
> 
> 
> --
> Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
> Bug reporting:         http://cygwin.com/bugs.html
> Documentation:         http://cygwin.com/docs.html
> FAQ:                   http://cygwin.com/faq/
> 
> 




--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: Cygwin CD question

[Larry Hall (RFK Partners, Inc)]

I knew I forgot something!  I'll never make it as a salesman... ;-)

Larry Hall                              lhall@rfk.com
RFK Partners, Inc.                      http://www.rfk.com
838 Washington Street                   (508) 893-9779 - RFK Office
Holliston, MA 01746                     (508) 893-9889 - FAX


At 02:53 PM 5/13/2002, Harold L Hunt wrote:
>Larry,
>
>Geez, you forgot to offer to sell him the Brooklyn Bridge, like I did :)
>
>Harold
>
>"Larry Hall (RFK Partners, Inc)" <lhall@rfk.com> said:
>
> > At 02:31 PM 5/13/2002, William V. Nicholson wrote:
> > 
> > >I notice from the information on the Redhat website and in the FAQ that
> > >there is no Cygwin CD.  I am interested in using Cygwin; but I don't
> > >believe I require the Cygwin license for my applications.  I have
> > >previously used Cygwin by downloading it; but I encountered some
> > >difficulties with the setup program, especially for downloading source
> > >code.  (It crashed when I chose the source code option for some packages.)
> > 
> > 
> > If you haven't tried it recently, try it again.  Report specifics of any
> > problems you may encounter here.
> > 
> > 
> > >Actually, one reason that I am interested in using Cygwin is in order to
> > >run free integrity checking software like Tripwire and ViperDB that works
> > >under Unix.  (There is a Tripwire for Windows; but it isn't free.)  
> > 
> > 
> > You must realize that Cygwin doesn't allow you to run a generic UNIX binary,
> > right?  Cygwin is a layer over Win32 providing a POSIX environment, not a 
> > UNIX binary emulator.
> > 
> > 
> > >There
> > >are security issues with downloading Cygwin before installing ViperDB or
> > >similar software under Cygwin and that is why I am interested in obtaining
> > >Cygwin by CD.  (My current workaround is just to download Cygwin using the
> > >fastest connection available and then burn a CD although that doesn't
> > >solve the problem with downloading source code),
> > 
> > 
> > Actually, if you're having some problem with setup that can't be solved, you
> > can download Cygwin in it's entirety using wget or similar tools.  From 
>that,
> > you can burn a CD and/or install locally.  Anyone providing such a CD to you
> > would take a similar approach.
> > 
> > 
> > 
> > Larry Hall                              lhall@rfk.com
> > RFK Partners, Inc.                      http://www.rfk.com
> > 838 Washington Street                   (508) 893-9779 - RFK Office
> > Holliston, MA 01746                     (508) 893-9889 - FAX
> > 
> > 
> > --
> > Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
> > Bug reporting:         http://cygwin.com/bugs.html
> > Documentation:         http://cygwin.com/docs.html
> > FAQ:                   http://cygwin.com/faq/
> > 
> > 
>
>
>
>
>--
>Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
>Bug reporting:         http://cygwin.com/bugs.html
>Documentation:         http://cygwin.com/docs.html
>FAQ:                   http://cygwin.com/faq/


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

RE: Cygwin CD question

[Robert Collins]

> -----Original Message-----
> From: William V. Nicholson [mailto:wvnicholson@lbl.gov] 
> Sent: Tuesday, May 14, 2002 7:11 AM
> To: Harold L Hunt
> Cc: cygwin@cygwin.com
> Subject: Re: Cygwin CD question
> 
> 
> 
> The point is that if you are really paranoid about these 
> things then someone might slip in a trojan or backdoor while 
> you are downloading Cygwin.  Obviously, if you subsequently 
> set up an integrity tool then your system together with the 
> backdoor would check out as okay (possibly until it got 
> infected with a second backdoor or whatever). I don't really 
> have those kind of security requirements but I like to do 
> things right if I can; but I'll just accept that I have to 
> download it, Thanks, William

You can look at the md5sums on the mirror sites and see if they match
what you downloaded.

You can also compare md5 sums across mirror sites - if they don't match,
somebody has twiddled something.

Rob

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/