--On January 28, 2007 9:55:42 AM +0100 Pekka Riikonen <[EMAIL PROTECTED]>
wrote:
:
Thanks for letting us know about these issues, but we have not updated
the files at silcnet.org since they were put up there. They were last
modified Dec 19 2005. I suspect you had some local problem or download
problem or some mirror was corrupted. I also verified the files this
morning and the md5sums are as follows:
Well now you have me even more concerned. I downloaded the file directly
from silcnet.org using both the port and ftp, and I also downloaded the
file on my Mac here at home using ftp to pull the file both from the http
and the ftp download sites. In all four cases, the md5sum and the sha256
sum did not match the file that was downloaded. Furthermore, the size of
the file was a meg less than it was supposed to be.
Then, while I was downloading copies from some of the mirrors to check
them, the file from silcnet.org suddenly matched the md5sum and the size
of the legitimate file. While it's entirely possible that *both* my
FreeBSD box *and* my Mac were somehow screwed up, it's hard to believe
that *multiple* downloads on both boxes would arrive at the same results
and then suddenly they would change, yet nothing changed at the
distribution site. It's certainly odd enough to warrant a thorough
investigation, I would think.
There was obviously a problem somewhere, but I'm not convinced it was on
both of my boxes and nowhere else.
Paul Schmehl ([EMAIL PROTECTED])
Senior Information Security Analyst
The University of Texas at Dallas
http://www.utdallas.edu/ir/security/
