Re: hacked package on server

2007-07-16 Thread Louis Kruger
> As the package installed, I saw some strange behavior, I'm worried it > might have been some kind of trojan. Are you able to actually describe "strange behaviour" It crashed the setup program, which seemed to indicate it was installing strangely named files. It also corrupted the cygwin

Re: hacked package on server

2007-07-16 Thread Louis Kruger
I do think that instead of simply aborting the install with a message that the server was compromised (was it? or is something else going on?), that a more useful option would be to allow the user to select a different mirror and continue the process. Sure. I just wanted to make the p

Re: hacked package on server

2007-07-16 Thread Louis Kruger
On Mon, Jul 16, 2007 at 10:30:52AM -0500, Louis Kruger wrote: > I also have a complaint: the dialog that notifies the user of the failed > MD5 is not well designed. The dialog asks "Do you want to skip the > package?" and has a yes and no button. I read it quickly and p

hacked package on server

2007-07-16 Thread Louis Kruger
I performed a cygwin update today, and was confronted with an MD5 failure on one of the packages. The package was vim-7.1-1.tar.bz2 downloaded from mirrors.dotsrc.org As the package installed, I saw some strange behavior, I'm worried it might have been some kind of trojan. I saved the hacked