sm-grimoire AT lists.ibiblio.org
Subject: Discussion of Spells and Grimoire items
List archive
Re: [SM-Grimoire] same version - different content
- From: Seth Woolley <seth AT tautology.org>
- To: "Julian v. Bock" <julian AT openit.de>
- Cc: Ladislav Hagara <hgr AT vabo.cz>, Source Mage - Grimoire <sm-grimoire AT lists.ibiblio.org>
- Subject: Re: [SM-Grimoire] same version - different content
- Date: Thu, 15 May 2003 11:07:56 -0700 (PDT)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
I do a diff of every one before I update it, and visually scan it. If
anybody wants to see what I checked, they can see the same thing I do at
http://smgl.positivism.org/audit
There are urls whenever there's a "modified" spell with a link to a
CGI-generated diff of the tarballs.
I've also been in contact with some of the authors complaining about their
changing the tarballs of the same version explaining what I go through
each time.
One of these days I'd love to find a trojan, but most of the time we have
everything including changelog events in them. :) It seems the best
reason to change the version but not increment so far has been
documentation improvements -- mostly somebody who happens to be better at
grammar or spelling gets a hold of CVS of something other than HEAD or
MAIN.
I suppose I can send an email with modified spell diffs to each section
maintainer whenever I detect them (every day, at least something in the
docs section changes, since they tend to not version stuff), or file bugs
on all of them.
Any help I can get would be great. ;) If you'd like your section not
checked by me, and you want to do it yourself, I can just drop you a note
instead of making the change myself.
Seth
On Thu, 15 May 2003, Julian v. Bock wrote:
> Hi
>
> >>>>> "LH" == Ladislav Hagara <hgr AT vabo.cz> writes:
>
> LH> After I made 'p4 sync' on my crypto section I found out that Seth
> LH> Woolley fixed MD5 of nessus project spells.
> LH> Thanks for it.
>
> LH> I know we can do nothing with this problem. Only FYI, MD5s of
> LH> "same" sources can be different. :-((
>
> This should never be silently updated since the most likely reason for
> this is an exploit. Someone should have a look at the diff before
> this is fixed.
>
> Julian
> _______________________________________________
> SM-Grimoire mailing list
> SM-Grimoire AT lists.ibiblio.org
> http://lists.ibiblio.org/mailman/listinfo/sm-grimoire
>
- --
Seth Alan Woolley <seth at tautology.org>, SPAM/UCE is unauthorized
Key id 7BEACC7D = 2978 0BD1 BA48 B671 C1EB 93F7 EDF4 3CDF 7BEA CC7D
Full Key at seth.tautology.org and pgp.mit.edu. info: www.gnupg.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (FreeBSD)
iD8DBQE+w9d/7fQ833vqzH0RAuLrAKDbvGvrXuVikHCHbARm9b5rOrTAcgCeMKkU
/nNbMdoGGtnvMZ0SXsrd2WY=
=ZiUj
-----END PGP SIGNATURE-----
-
[SM-Grimoire] same version - different content,
Ladislav Hagara, 05/15/2003
-
Re: [SM-Grimoire] same version - different content,
Julian v. Bock, 05/15/2003
-
Re: [SM-Grimoire] same version - different content,
Dufflebunk, 05/15/2003
-
[SM-Grimoire] same version - different content,
Ladislav Hagara, 05/15/2003
-
Message not available
- [SM-Grimoire] Re: same version - different content, Ladislav Hagara, 05/17/2003
-
Message not available
-
[SM-Grimoire] same version - different content,
Ladislav Hagara, 05/15/2003
-
Re: [SM-Grimoire] same version - different content,
Dufflebunk, 05/15/2003
- Re: [SM-Grimoire] same version - different content, Seth Woolley, 05/15/2003
-
Re: [SM-Grimoire] same version - different content,
Julian v. Bock, 05/15/2003
Archive powered by MHonArc 2.6.24.