Re: Trusted Software Vendor

2012-06-19 Thread Corinna Vinschen
On Jun 19 04:25, Andrey Repin wrote: Greetings, Corinna Vinschen! Out of curiosity would downloading setup.exe using wget also work around the problem? Most likely.  I don't think wget cares about protecting Windows users from their own stupidity.  If you use wget, you should know

Re: Trusted Software Vendor

2012-06-18 Thread Corinna Vinschen
On Jun 14 22:45, Andrey Repin wrote: Greetings, Vaclav Zeman! Out of curiosity would downloading setup.exe using wget also work around the problem? Most likely.  I don't think wget cares about protecting Windows users from their own stupidity.  If you use wget, you should know what

Re: Trusted Software Vendor

2012-06-18 Thread Andrey Repin
Greetings, Corinna Vinschen! Out of curiosity would downloading setup.exe using wget also work around the problem? Most likely.  I don't think wget cares about protecting Windows users from their own stupidity.  If you use wget, you should know what you're doing. How about you just

Re: Trusted Software Vendor

2012-06-14 Thread Andrey Repin
Greetings, Vaclav Zeman! Out of curiosity would downloading setup.exe using wget also work around the problem? Most likely.  I don't think wget cares about protecting Windows users from their own stupidity.  If you use wget, you should know what you're doing. How about you just give it a try?

Re: Trusted Software Vendor

2012-06-12 Thread Warren Young
On 6/9/2012 9:57 AM, Christopher Faylor wrote: and I'm really not willing to burden cygwin.com with the cycles necessary to unpack tarballs at cygwin.com to sign them. Based on the traffic I see to cygwin-apps, my sense is that this would amount to single-digit CPU-minutes per day, once you

Re: Trusted Software Vendor

2012-06-12 Thread Christopher Faylor
On Tue, Jun 12, 2012 at 06:57:45AM -0600, Warren Young wrote: On 6/9/2012 9:57 AM, Christopher Faylor wrote: and I'm really not willing to burden cygwin.com with the cycles necessary to unpack tarballs at cygwin.com to sign them. Based on the traffic I see to cygwin-apps, my sense is that this

RE: Trusted Software Vendor

2012-06-12 Thread James Johnston
Red Hat might not have to buy a code signing cert for this. They might already have one that will work: http://goo.gl/5Hm3C The Cygwin project is not Red Hat. It wouldn't be Red Hat buying anything. What is the Cygwin project then? I honestly thought it was a Red Hat project... I.e. I've

Re: Trusted Software Vendor

2012-06-12 Thread Nick Lowe
To me, the key question is: Would Red Hat have an objection in principle to signing Cygwin and its packages given the history and ties. -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html

Re: Trusted Software Vendor

2012-06-12 Thread Earnie Boyd
On Tue, Jun 12, 2012 at 10:46 AM, James Johnston wrote:  Wikipedia says that ... Wikipedia isn't the keeper of the information relevant to Cygwin. You can only find the truth at cygwin.com. Besides, companies do support open source projects by providing man hours to it. It doesn't mean that

Re: Trusted Software Vendor

2012-06-12 Thread Nick Lowe
http://cygwin.com/ The Cygwin DLL and utilities are Copyright © 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012 Red Hat, Inc Wikipedia isn't the keeper of the information relevant to Cygwin.  You can only find the truth at cygwin.com.  Besides, companies do support

Re: Trusted Software Vendor

2012-06-12 Thread Christopher Faylor
On Tue, Jun 12, 2012 at 04:12:58PM +0100, Nick Lowe wrote: http://cygwin.com/ The Cygwin DLL and utilities are Copyright ? 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012 Red Hat, Inc The version of Cygwin supported at cygwin.com is a GPL-based free software project.

Re: Trusted Software Vendor

2012-06-12 Thread Eric Blake
On 06/12/2012 09:12 AM, Nick Lowe wrote: http://cygwin.com/ The Cygwin DLL and utilities are Copyright © 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012 Red Hat, Inc Yes, that's true for the cygwin1.dll. But it's not all the executables available from

Re: Trusted Software Vendor

2012-06-12 Thread Christopher Faylor
On Tue, Jun 12, 2012 at 09:32:00AM -0600, Eric Blake wrote: On 06/12/2012 09:12 AM, Nick Lowe wrote: http://cygwin.com/ The Cygwin DLL and utilities are Copyright ? 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012 Red Hat, Inc Yes, that's true for the cygwin1.dll.

Re: Trusted Software Vendor

2012-06-12 Thread Roger K. Wells
On 06/12/2012 11:10 AM, Earnie Boyd wrote: On Tue, Jun 12, 2012 at 10:46 AM, James Johnston wrote: Wikipedia says that ... Wikipedia isn't the keeper of the information relevant to Cygwin. You can only find the truth at cygwin.com. Besides, companies do support open source projects by

Re: Trusted Software Vendor

2012-06-12 Thread marco atzeri
On 6/12/2012 7:08 PM, Roger K. Wells wrote: On 06/12/2012 11:10 AM, Earnie Boyd wrote: On Tue, Jun 12, 2012 at 10:46 AM, James Johnston wrote: Wikipedia says that ... Wikipedia isn't the keeper of the information relevant to Cygwin. You can only find the truth at cygwin.com. Besides,

Re: Trusted Software Vendor

2012-06-11 Thread Earnie Boyd
On Sun, Jun 10, 2012 at 1:51 PM, Buchbinder, Barry (NIH/NIAID) [E] wrote: I have setup.exe downloaded to /usr/local/bin (and renamed to getcygwin.exe).  When I launch it by hand (but not by cmd /c start), Windows tells me that the publisher could not be verified and asks whether I want to run

Re: Trusted Software Vendor

2012-06-11 Thread Andrey Repin
Greetings, Buchbinder, Barry (NIH/NIAID) [E]! I have setup.exe downloaded to /usr/local/bin (and renamed to getcygwin.exe). When I launch it by hand (but not by cmd /c start), Windows tells me that the publisher could not be verified and asks whether I want to run it. This is because of the

RE: Trusted Software Vendor

2012-06-11 Thread Buchbinder, Barry (NIH/NIAID) [E]
Andrey Repin sent the following at Monday, June 11, 2012 10:03 AM This is because of the file being downloaded from the web (check file streams for details). You can easily cleanup the file metadata by copying it to FAT drive (Flash disk/memory card). It worked! For the record, I had to delete

Re: Trusted Software Vendor

2012-06-11 Thread Otto Meta
This is because of the file being downloaded from the web (check file streams for details). You can easily cleanup the file metadata by copying it to FAT drive (Flash disk/memory card). The file stream with the downloaded from the web information can easily be removed with the Stream tool

Re: Trusted Software Vendor

2012-06-11 Thread Christopher Faylor
On Mon, Jun 11, 2012 at 04:44:46PM +0200, Otto Meta wrote: This is because of the file being downloaded from the web (check file streams for details). You can easily cleanup the file metadata by copying it to FAT drive (Flash disk/memory card). The file stream with the downloaded from the

Re: Trusted Software Vendor

2012-06-11 Thread Otto Meta
Out of curiosity would downloading setup.exe using wget also work around the problem? Most likely. I don't think wget cares about protecting Windows users from their own stupidity. If you use wget, you should know what you're doing. How about you just give it a try? Otto -- Problem

Re: Trusted Software Vendor

2012-06-11 Thread Christopher Faylor
On Mon, Jun 11, 2012 at 04:51:07PM +0200, Otto Meta wrote: cgf wrote: Out of curiosity would downloading setup.exe using wget also work around the problem? Most likely. I don't think wget cares about protecting Windows users from their own stupidity. If you use wget, you should know what

Re: Trusted Software Vendor

2012-06-11 Thread Václav Zeman
On 11 June 2012 16:55, Christopher Faylor wrote: On Mon, Jun 11, 2012 at 04:51:07PM +0200, Otto Meta wrote: cgf wrote: Out of curiosity would downloading setup.exe using wget also work around the problem? Most likely.  I don't think wget cares about protecting Windows users from their own

RE: Trusted Software Vendor

2012-06-11 Thread Buchbinder, Barry (NIH/NIAID) [E]
Christopher Faylor sent the following at Monday, June 11, 2012 10:56 AM On Mon, Jun 11, 2012 at 04:51:07PM +0200, Otto Meta wrote: cgf wrote: Out of curiosity would downloading setup.exe using wget also work around the problem? Most likely. I don't think wget cares about protecting Windows

RE: Trusted Software Vendor

2012-06-10 Thread Buchbinder, Barry (NIH/NIAID) [E]
I have setup.exe downloaded to /usr/local/bin (and renamed to getcygwin.exe). When I launch it by hand (but not by cmd /c start), Windows tells me that the publisher could not be verified and asks whether I want to run it. This is a minor annoyance but it would be nice if it could be addressed

Re: Trusted Software Vendor

2012-06-09 Thread Václav Zeman
On 06/08/2012 08:46 PM, Christopher Faylor wrote: On Fri, Jun 08, 2012 at 02:15:27PM -0400, Milton Quinteros S. wrote: Would you consider the possibility to subscribe to the Comodo Trusted Software Vendor list (http://internetsecurity.comodo.com/trustedvendor/signup.php), and sign every

Re: Trusted Software Vendor

2012-06-09 Thread Christopher Faylor
On Sat, Jun 09, 2012 at 01:04:37PM +0200, V?clav Zeman wrote: On 06/08/2012 08:46 PM, Christopher Faylor wrote: On Fri, Jun 08, 2012 at 02:15:27PM -0400, Milton Quinteros S. wrote: Would you consider the possibility to subscribe to the Comodo Trusted Software Vendor list (http

Trusted Software Vendor

2012-06-08 Thread Milton Quinteros S.
Would you consider the possibility to subscribe to the Comodo Trusted Software Vendor list (http://internetsecurity.comodo.com/trustedvendor/signup.php), and sign every executable? It would be so useful for Comodo Firewall users like me and other vendor list based firewalls to trust

Trusted Software Vendor

2012-06-08 Thread R P Herrold
On Fri, 8 Jun 2012, Milton Quinteros S. wrote: Would you consider the possibility to subscribe to the Comodo Trusted Software Vendor list (http://internetsecurity.comodo.com/trustedvendor/signup.php), and sign every executable? I don't know how much is the certificate but I'm sure