Changes between Initial Version and Version 1 of Ticket #67, comment 14


Ignore:
Timestamp:
2011-01-28T05:02:03Z (14 years ago)
Author:
zooko
Comment:

Legend:

Unmodified
Added
Removed
Modified
  • Ticket #67, comment 14

    initial v1  
    33Thanks again for the quick response to this bug report!
    44
    5 The sf.net SVN browser is off-line due to a security breach at sf.net: http://sourceforge.net/blog/sourceforge-net-attack/ (and by the way we should probably think about what could go wrong if the servers that host Crypto++ were compromised. Does everyone need to check the secure hashes of the downloadable .zip files? What about revision control history -- how can we verify that it hasn't been tampered with. Are there any other assets at sf.net that we might need to account for? The issue tracker? Any passwords or other secrets stored at sf.net? 
     5The sf.net SVN browser is off-line due to a security breach at sf.net: http://sourceforge.net/blog/sourceforge-net-attack/ (and by the way we should probably think about what could go wrong if the servers that host Crypto++ were compromised. Does everyone need to check the secure hashes of the downloadable .zip files? What about revision control history -- how can we verify that it hasn't been tampered with. Are there any other assets at sf.net that we might need to account for? The issue tracker? Any passwords or other secrets stored at sf.net?)
    66
    77The bzr mirror that I have set up (launchpad.net does this for me automatically) has this as patch 520: