On Wednesday, October 9, 2002, at 12:33  AM, Martin Costabel wrote:

> Carsten Bormann wrote:
> []
>> Given the variety of sources we use for obtaining source files, this 
>> is just an accident waiting to happen over and over again in fink.
>
> This is prevented by the use of MD5 checksums in Fink.
>

Yep. If a fink package tells you its MD5 is bad, please notify the 
maintainer (or the list) and we will look in to it.

Fink MD5s are stored in the .info files, locally, so a hacker cannot 
change them unless they hack fink CVS AND the site with the tarball. :)

-Ben



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Fink-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/fink-users

Reply via email to