Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Date: Thu, 14 Feb 2002 15:31:22 +0000
Message-ID: <8369-Thu14Feb2002153122+0000-starksb@ebi.ac.uk>
X-Mailer: emacs 20.7.1 (via feedmail 9-beta-7 I);
	VM 7.00 under Emacs 20.7.1
From: David Starks-Browning <starksb AT ebi DOT ac DOT uk>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
To: cygwin AT cygwin DOT com
Subject: Re: anybody else also infected
In-Reply-To: <3C6BD3F7.5080606@cportcorp.com>
References: <01A7DAF31F93D511AEE300D0B706ED92019ECD65 AT axcs13 DOT cos DOT agilent DOT com>
	<4 DOT 3 DOT 1 DOT 2 DOT 20020214091816 DOT 01ee0518 AT pop DOT ma DOT ultranet DOT com>
	<4 DOT 3 DOT 1 DOT 2 DOT 20020214094510 DOT 01ea0710 AT pop DOT ma DOT ultranet DOT com>
	<3C6BD3F7 DOT 5080606 AT cportcorp DOT com>

On Thursday 14 Feb 02, Peter Buckley writes:
> I agree about the healthy skepticism- this was obviously a false 
> positive from the very start, but I don't think the faq addresses this 
> type of false positive.

Addressing virus alerts in the FAQ has always been a dilemma for me.
I do not like to give the advice "disable your antivirus software" or
"turn off checking for C:\cygwin".  It seems to me that such action
could be exploited.

Should the FAQ say something like "do not bother the list with virus
alerts unless you have independently verified that it is not a false
positive"?  This would apply to all Cygwin software, package archives,
DLLs, ...

There was a special problem with Cygwin Setup because NAI/McAfee would
hang the system when opening tar.gz archives.  Maybe this is not a
problem anymore, and can be removed from the FAQ.  Or the advice could
be simplified to be "update your antivirus software or replace it with
another vendor's product".  Of course not everyone can do that, but
that's not our problem.

Thanks for your opinions.

David
(Cygwin FAQ maintainer)



--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/