[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: I'm afraid I've been cracked.



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

A long time ago, in a galaxy far, far way, someone said...

> On Wed, 27 Sep 2000, Alvin Oga wrote:
> 
> > check the binaries tooo...
> > 	top, ps, ls, last, w, who, netstat, passwd, login, etc...
> > 
> 
> Please remember that you're speaking to a recent convert from Mandrake.
> There, all I would have to do would be 'rpm -V `which top`' and rpm would
> tell me if the md5sum had been changed from the original package.  Does dpkg
> have a similar funcitonality? I couldn't find mention of it in the man page.

Of sorts, although you'd have to trust that the rpm binary *and* the rpm
database weren't screwed with.

> Right now I'm fiddling with md5sum, but if I understand correctly, that only
> tells me the md5sum of the current file, it can't verify that the md5 sum is
> "correct" (goes back to the "it's smart, not magic" argument).

- -- 
- ----------------------------------------------------------------------
Phil Brutsche				    pbrutsch@tux.creighton.edu

GPG fingerprint: 9BF9 D84C 37D0 4FA7 1F2D  7E5E FD94 D264 50DE 1CFC
GPG key id: 50DE1CFC
GPG public key: http://tux.creighton.edu/~pbrutsch/gpg-public-key.asc
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.1 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE50syX/ZTSZFDeHPwRAp4IAKCTTn7RlvBwXsQoUvT+r+VzeytuYwCfW3fP
XHG/BmccE5RlZR5cXD+0Ols=
=DHir
-----END PGP SIGNATURE-----



Reply to: