Re: MD5s of setup.exe on mirrors.

2007-05-14 Thread Alexander Sotirov
Christopher Faylor wrote: It was actually all academic before since: 1) there was nothing wrong with the setup.exe on the mirrors and 2) people shouldn't have been running setup.exe from the mirrors to begin with. Can you elaborate on why people shouldn't run setup.exe from the mirrors? I

Re: MD5s of setup.exe on mirrors.

2007-05-14 Thread Larry Hall (Cygwin)
Alexander Sotirov wrote: Christopher Faylor wrote: It was actually all academic before since: 1) there was nothing wrong with the setup.exe on the mirrors and 2) people shouldn't have been running setup.exe from the mirrors to begin with. Can you elaborate on why people shouldn't run

Re: MD5s of setup.exe on mirrors.

2007-05-14 Thread Christopher Faylor
On Mon, May 14, 2007 at 02:06:27PM -0400, Larry Hall (Cygwin) wrote: Alexander Sotirov wrote: Christopher Faylor wrote: It was actually all academic before since: 1) there was nothing wrong with the setup.exe on the mirrors and 2) people shouldn't have been running setup.exe from the mirrors

Re: MD5s of setup.exe on mirrors.

2007-05-14 Thread Alexander Sotirov
Christopher Faylor wrote: That + if you want to talk about trust then you should trust the method that we advertise for installing cygwin which is to click on the Install Cygwin Now! link. Are you saying that I should trust setup.exe downloaded from cygwin.com more than setup.exe downloaded

Re: MD5s of setup.exe on mirrors.

2007-05-14 Thread Larry Hall (Cygwin)
Alexander Sotirov wrote: Christopher Faylor wrote: That + if you want to talk about trust then you should trust the method that we advertise for installing cygwin which is to click on the Install Cygwin Now! link. Are you saying that I should trust setup.exe downloaded from cygwin.com more

Re: MD5s of setup.exe on mirrors.

2007-05-14 Thread Christopher Faylor
On Mon, May 14, 2007 at 12:23:09PM -0700, Alexander Sotirov wrote: Christopher Faylor wrote: That + if you want to talk about trust then you should trust the method that we advertise for installing cygwin which is to click on the Install Cygwin Now! link. Are you saying that I should trust

Re: MD5s of setup.exe on mirrors.

2007-05-14 Thread Christopher Faylor
On Mon, May 14, 2007 at 03:50:16PM -0400, Larry Hall (Cygwin) wrote: Alexander Sotirov wrote: Christopher Faylor wrote: That + if you want to talk about trust then you should trust the method that we advertise for installing cygwin which is to click on the Install Cygwin Now! link. Are you

RE: MD5s of setup.exe on mirrors.

2007-05-14 Thread Dave Korn
On 14 May 2007 20:23, Alexander Sotirov wrote: Even if I download setup.exe from cygwin.com, it still fetches the package data from a mirror. As far as I know the package data is not signed, so setup.exe cannot verify that is has not been tampered with. If a mirror has a modified bash package

Re: MD5s of setup.exe on mirrors.

2007-05-14 Thread Markus E . L .
LarryHall(Cygwin) writes: Alexander Sotirov wrote: Christopher Faylor wrote: That + if you want to talk about trust then you should trust the method that we advertise for installing cygwin which is to click on the Install Cygwin Now! link. Are you saying that I should trust setup.exe

Re: MD5s of setup.exe on mirrors.

2007-05-14 Thread Markus E . L .
Christopher Faylor writes: On Sun, May 13, 2007 at 03:13:58PM +0200, ls-cygwin-2006 wrote: Brian Dessent writes: [EMAIL PROTECTED] wrote: Please anyone touch setup.exe? If the mirrors pick it up then we (you! :) know that it is, somehow, a time stamping issue. The issue can probably not

Re: MD5s of setup.exe on mirrors.

2007-05-14 Thread Markus E . L .
LarryHall(Cygwin) writes: Alexander Sotirov wrote: Christopher Faylor wrote: It was actually all academic before since: 1) there was nothing wrong with the setup.exe on the mirrors and 2) people shouldn't have been running setup.exe from the mirrors to begin with. Can you elaborate on

RE: MD5s of setup.exe on mirrors.

2007-05-14 Thread Dave Korn
On 14 May 2007 21:27, Markus E.L. wrote: often. Did you mean setup.ini instead? But setup.ini is coming from the mirror, isn't it? Well, it comes from the mirror, same as the packages do, but it isn't generated there, if that's what you mean. (And this is a serious question: If it comes

Re: MD5s of setup.exe on mirrors.

2007-05-14 Thread Markus E . L .
DaveKorn writes: On 14 May 2007 21:27, Markus E.L. wrote: often. Did you mean setup.ini instead? But setup.ini is coming from the mirror, isn't it? Well, it comes from the mirror, same as the packages do, but it isn't generated there, if that's what you mean. No, that wasn't what I

RE: MD5s of setup.exe on mirrors.

2007-05-14 Thread Buchbinder, Barry (NIH/NIAID) [E]
Alexander Sotirov wrote on Monday, May 14, 2007 3:23 PM: Christopher Faylor wrote: That + if you want to talk about trust then you should trust the method that we advertise for installing cygwin which is to click on the Install Cygwin Now! link. Are you saying that I should trust setup.exe

Re: MD5s of setup.exe on mirrors.

2007-05-14 Thread Larry Hall (Cygwin)
On 05/14/2007, Markus E.L. wrote: DaveKorn writes: On 14 May 2007 21:27, Markus E.L. wrote: often. Did you mean setup.ini instead? But setup.ini is coming from the mirror, isn't it? Well, it comes from the mirror, same as the packages do, but it isn't generated there, if

Mirrors in GPL violation? + Re: MD5s of setup.exe on mirrors.

2007-05-14 Thread Markus E . L .
Buchbinder,Barry(NIH/NIAID)[E] writes: long explanation Barry, my and (AFAI understand) Alex' problem is not with using setup - I for my part am quite comfortable with how I start setup. Alex (in my humble opinion rightly) is concerned with questions of trust and endorsement (like: cygwin.com

Re: MD5s of setup.exe on mirrors.

2007-05-14 Thread Markus E . L .
Buchbinder,Barry(NIH/NIAID)[E] writes: I understand that you are perturbed that setup does not behave as you might have expected. Did you actually read what me or Alex wrote? Me seems none of us expressed ANY perturbation with regard to that setup wouldn't behave as expected or advertised.

RE: Mirrors in GPL violation? + Re: MD5s of setup.exe on mirrors.

2007-05-14 Thread Dave Korn
On 15 May 2007 00:24, Markus E.L. wrote: is concerned with questions of trust and endorsement That's the underlying source of your error right there: a false assumption. (like: cygwin.com lists the mirrors as source of the software, then declines any responsibility for the actual content

Re: Mirrors in GPL violation? + Re: MD5s of setup.exe on mirrors.

2007-05-14 Thread Markus E . L .
DaveKorn writes: On 15 May 2007 00:24, Markus E.L. wrote: is concerned with questions of trust and endorsement That's the underlying source of your error right there: a false assumption. So Alex has been concerned with different questions? My apologies if I read him wrong there.

Re: Mirrors in GPL violation? + Re: MD5s of setup.exe on mirrors.

2007-05-14 Thread Markus E . L .
Hi Dave, Markus E.L. writes: DaveKorn writes: snipped Rereading parts of the thread and your reply, I fear it happens again: Lot's of reproaches in your's and Barry's replys, accusations of stuff _I_ never wrote, down to questioning the legitimacy of addressing features of any kind in any

Re: MD5s of setup.exe on mirrors.

2007-05-14 Thread Carlo Florendo
Markus E.L. wrote: Buchbinder,Barry(NIH/NIAID)[E] writes: Well -- that wasn't the topic with any of us. We know how to run setup (all three ways: From cygwin.com, from the mirrors, from downloaded copies, even from CDs). Do you take us for fools? For sanity's sake, please stop this thread

Re: MD5s of setup.exe on mirrors.

2007-05-13 Thread ls-cygwin-2006
Brian Dessent writes: [EMAIL PROTECTED] wrote: Please anyone touch setup.exe? If the mirrors pick it up then we (you! :) know that it is, somehow, a time stamping issue. The issue can probably not be cleared up right now and is probably not worth the trouble, but perhaps it can be just

Re: MD5s of setup.exe on mirrors.

2007-05-13 Thread Christopher Faylor
On Sun, May 13, 2007 at 03:13:58PM +0200, ls-cygwin-2006 wrote: Brian Dessent writes: [EMAIL PROTECTED] wrote: Please anyone touch setup.exe? If the mirrors pick it up then we (you! :) know that it is, somehow, a time stamping issue. The issue can probably not be cleared up right now and is

Re: MD5s of setup.exe on mirrors.

2007-05-12 Thread ls-cygwin-2006
Alexander Sotirov [EMAIL PROTECTED] writes: [EMAIL PROTECTED] wrote: Cygwin mirrors have in their toplevel a setup.exe and an md5.sum. The m5sum is ae1944f528338033bab3b4710d5bd736 setup.bz2 b31ddcef84f25919a5d3184167b4a90d setup.exe 0503889504b7ff0b23e65586a522b3ad setup.ini

RE: MD5s of setup.exe on mirrors.

2007-05-12 Thread Dave Korn
On 12 May 2007 09:54, ls-cygwin-2006 wrote: b31ddcef84f25919a5d3184167b4a90d setup.exe whereas the setup.exe has actually the md5sum: fbc848393ed05ef4f51a253f75bcafeb --- mirror-set.txt 2007-05-12 10:18:58.688913700 +0100 +++ orig-set.txt2007-05-12 10:19:07.564595300

Re: MD5s of setup.exe on mirrors.

2007-05-12 Thread ls-cygwin-2006
Dave Korn [EMAIL PROTECTED] writes: On 12 May 2007 09:54, ls-cygwin-2006 wrote: b31ddcef84f25919a5d3184167b4a90d setup.exe whereas the setup.exe has actually the md5sum: fbc848393ed05ef4f51a253f75bcafeb --- mirror-set.txt 2007-05-12 10:18:58.688913700 +0100 +++

Re: MD5s of setup.exe on mirrors.

2007-05-12 Thread Brian Dessent
[EMAIL PROTECTED] wrote: Please anyone touch setup.exe? If the mirrors pick it up then we (you! :) know that it is, somehow, a time stamping issue. The issue can probably not be cleared up right now and is probably not worth the trouble, but perhaps it can be just fixed. I've touched the

MD5s of setup.exe on mirrors.

2007-05-11 Thread ls-cygwin-2006
Some hours ago I noticed something strange: Cygwin mirrors have in their toplevel a setup.exe and an md5.sum. The m5sum is ae1944f528338033bab3b4710d5bd736 setup.bz2 b31ddcef84f25919a5d3184167b4a90d setup.exe 0503889504b7ff0b23e65586a522b3ad setup.ini whereas the setup.exe has

Re: MD5s of setup.exe on mirrors.

2007-05-11 Thread Alexander Sotirov
[EMAIL PROTECTED] wrote: Cygwin mirrors have in their toplevel a setup.exe and an md5.sum. The m5sum is ae1944f528338033bab3b4710d5bd736 setup.bz2 b31ddcef84f25919a5d3184167b4a90d setup.exe 0503889504b7ff0b23e65586a522b3ad setup.ini whereas the setup.exe has actually the md5sum:

Re: MD5s of setup.exe on mirrors.

2007-05-11 Thread Christopher Faylor
On Fri, May 11, 2007 at 12:58:59PM -0700, Alexander Sotirov wrote: [EMAIL PROTECTED] wrote: Cygwin mirrors have in their toplevel a setup.exe and an md5.sum. The m5sum is ae1944f528338033bab3b4710d5bd736 setup.bz2 b31ddcef84f25919a5d3184167b4a90d setup.exe

Re: MD5s of setup.exe on mirrors.

2007-05-11 Thread ls-cygwin-2006
On Fri, May 11, 2007 at 12:58:59PM -0700, Alexander Sotirov wrote: [EMAIL PROTECTED] wrote: Cygwin mirrors have in their toplevel a setup.exe and an md5.sum. The m5sum is ae1944f528338033bab3b4710d5bd736 setup.bz2 b31ddcef84f25919a5d3184167b4a90d setup.exe

Re: MD5s of setup.exe on mirrors.

2007-05-11 Thread Alexander Sotirov
Christopher Faylor wrote: Nobody seemed to care. Considering the fact that MD5 collisions are now trivial to generate, it probably doesn't matter much anyways - the fact that your copy of setup.exe has the right MD5 doesn't mean that it hasn't been tampered with. We don't control the

Re: MD5s of setup.exe on mirrors.

2007-05-11 Thread Christopher Faylor
On Fri, May 11, 2007 at 02:42:33PM -0700, Alexander Sotirov wrote: Christopher Faylor wrote: Nobody seemed to care. Considering the fact that MD5 collisions are now trivial to generate, it probably doesn't matter much anyways - the fact that your copy of setup.exe has the right MD5 doesn't mean