Just out of curiosity...
> Is it logical to use an OS for the intense focus on security and > correctness, yet download the binaries from a random person on a mailing > list instead of any official source with reasonable file integrity > checking process in place? From: http://toolbar.netcraft.com/site_report?url=ftp.openbsd.org Site http://ftp.openbsd.org Reverse DNS openbsd.sunsite.ualberta.ca Netblock Owner IP address OS Web Server Last changed University of Alberta 1030 General Services Building Edmonton CA 129.128.5.191 Solaris Apache/1.3.34 Unix PHP/4.4.2 mod_perl/1.27 17-Apr-2007 What a security!! FYI: "Trojaned version of OpenSSH package has been found to reside on ftp.openbsd.org's server." http://www.mavetju.org/unix/openssh-trojan.php http://www.openssh.org/txt/trojan.adv Are you remember? -- JS
