LiveCD wierdness.

[Sapienter]

update: A main developer checked the ISOs and package MD5s and declared them clean. I must just be falling through parallell dimensions again.

-----------

I have a basic question. Now that LiveCDs for 1.4 are out, are they constantly being updated with package changes fixes?

If so, why don't the filestamps change?.

If not what's up with this?

https://forums.gentoo.org/viewtopic.php?t=87278

[frenkel]

Those CD's are notconstantly being updated with package changes.
As GurliGebis said in the thread you noticed: "Maybe one of those files you downloaded is corrupt", these things can always happen.

Greets,
Frank
_________________
http://techfield.org

[Sapienter]

If the files are being updated (which would not be corruption) why didn't the timestamps change?

And as I mentioned in the other thread, corruption can't be the issue, because the md5 DOES match the file now, and the TWO previous text files quoted different data of perfect MD5 length. The md5 of the downloaded file and the text files quoted md5 are in perfect agreement. The issue is that what they agree on CHANGED, without the timestamp changing, like someone changed the file, and didn't want anyone else to notice. I am not comfortable putting the systems I've made with that online now, as they may be backdoored.

It is possible that the files could have been distributed corruptly to the servers originally, but it is not possible that I downloaded two DIFFERENT tiny text md5 files which both happened to corrupt in transit in such a way as to change ALL of their charectors to different valid ASCII text HEX charectors. Odds simply of getting valid hex chars randomly are 16 out of 254 to the POWER of the md5 keylength, plus the difficulty of protocol error checking being damaged so as not to notice, resulting in odds WAAAY worse than ballbearing landing in egg sandwich odds (for Douglas Adams fans). And these rdiculous odds had to happen TWICE in one day over a sample of perhaps a dozen downloads of the wee files.
_________________
"The spirit of the law is the least of the things we are prepared to violate."
--from http://www.schlockmercenary.com/

[Sapienter]

And it can't be updates, because I've installed the LiveCD to a sparkgap firewalled box (untrusted Operating System) and the OpenSSH package is NOT updated with the security patch (still version 3.6.1_p2), which fix (openssh-3.7.1_p1) came out 9-16. If they were to update anything, they would update the security patch on SSH.
_________________
"The spirit of the law is the least of the things we are prepared to violate."
--from http://www.schlockmercenary.com/

[frenkel]

I said, "Those CD's are NOT constantly being updated with package changes", so timestamps won't change.

Greets,
Frank
_________________
http://techfield.org

[Sapienter]

Woops. Sorry Frankel, I skimmed that too fast.

BTW, I got on IRC and talked to a developer, and have submitted Bug 29279.
_________________
"The spirit of the law is the least of the things we are prepared to violate."
--from http://www.schlockmercenary.com/

[frenkel]

No big deal, can happen to anyone, even to me

Greets,
Frank
_________________
http://techfield.org