X-Recipient: archive-cygwin AT delorie DOT com X-SWARE-Spam-Status: No, hits=-2.4 required=5.0 tests=AWL,BAYES_00,SPF_PASS X-Spam-Check-By: sourceware.org Message-ID: <49D500C5.3040808@gmail.com> Date: Thu, 02 Apr 2009 19:15:33 +0100 From: Dave Korn User-Agent: Thunderbird 2.0.0.17 (Windows/20080914) MIME-Version: 1.0 To: cygwin AT cygwin DOT com Subject: Re: Fw: Re: don't know why ./configure command fails References: <944775 DOT 11641 DOT qm AT web26101 DOT mail DOT ukl DOT yahoo DOT com> <49D4F7DD DOT 9020702 AT gmail DOT com> <49D4F99C DOT 2030508 AT gmail DOT com> <20090402175341 DOT GA8082 AT ednor DOT casa DOT cgf DOT cx> In-Reply-To: <20090402175341.GA8082@ednor.casa.cgf.cx> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Christopher Faylor wrote: > On Thu, Apr 02, 2009 at 06:45:00PM +0100, Dave Korn wrote: >> Dave Korn wrote: >> I downloaded setup.ini from the goh.com mirror; it's badly mangled, and >> is missing loads of entries. I compared it to a copy from another >> mirror, and that one was complete. > > The date stamp for setup.ini on that mirror is August 8. I see that > this site is on the road to being deleted as a mirror by my mirror > checking software but it's mystifying that it would even be listed at > all if there was an August version of setup.ini on the site for any > length of time. Not only that but there are various other mangled versions in their mirror root dir, called "s", ".setup.tmp". Somebody has been messing around. > In any event, this mirror will likely be removed from the list of > mirrors in the next mirror scan. If they update it, will it be auto-added back again? I think it shouldn't be without some kind of explanation from the site admin about what exactly they have been playing at. (I always think the worst. Some kind of downgrade attack? Probably not, but mirror admins have no business messing around with setup.ini locally. They can't edit it directly or the sig check will fail, but they *can* substitute an old version - setup.exe wouldn't know to warn if it was the user's first installation.) cheers, DaveK -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/