Re: Debian audititing tool?

[Rainer Weikusat <weikusat@mail.uni-mainz.de>]

Christian Kurz <shorty@debian.org> writes:
> > Debsums seems to help a little bit - you can expect to catch some less-clueful
> > intruders with it, but it doesn't help in general.
> 
> debsums just uses md5sums which can be manipulated on the one hand and
> on the other hand you modify binaries so that the md5sum will still be
> the same.

So you've effectively broken MD5 in a way that would yield useful
results (ie would allow you to replace a specific binary with another
specific binary, not with some more or less random garbage). How came
it that you weren't prominently mentionend in this month's cryptogram?

-- 
SIGSTOP