On Sun, 5 May 2002, Nadav Har'El wrote:

> On Sun, May 05, 2002, Tzafrir Cohen wrote about "Re: mozilla's recent hole":
> > up2date requires registration (unlike redhat itself). Does this pose any
> > technical problems?
>
> Anybody with half-decent programming skills can program something that
> daily mirror's or rsync's Redhat's updates, checks their gpg signatures,
> and then either apply them automatically or apply them by hand once in
> a while (I do the latter).
>
> If you don't want to take bandwidth from Redhat without paying them anything,
> consider doing this from a mirror, not from Redhat's original site. Redhat's
> signature on the RPM will let you verify that you're not installing trojan
> updates, even if you don't fully trust the mirror (of course, the mirror can
> hide certain important updates from you if they want, or "replay" old
> updates... Oh, well...).
>
> With an anonymous rsync server (like iglu.org.il) it's probably possible to
> get the latest updates like this in 3 lines of shell.

And if you've got the Huzpa, why not provide up2date services as well?

http://www.biology.duke.edu/computer/unix/current/

-- 
Tzafrir Cohen
mailto:[EMAIL PROTECTED]
http://www.technion.ac.il/~tzafrir



=================================================================
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Reply via email to