Re: libtool audit

2004-01-01 Thread Scott James Remnant
On Thu, 2003-12-18 at 12:08, Peter O'Gorman wrote: > Gary V. Vaughan wrote: > | Scott James Remnant wrote: > | We're done! > > Jeez, I didn't even get the chance to start looking! > > Thank you both so much, I'll buy both multiple beers should we ever meet. > If the Libtool Team were to ever me

Re: libtool audit

2003-12-18 Thread Peter O'Gorman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gary V. Vaughan wrote: | Scott James Remnant wrote: | We're done! Jeez, I didn't even get the chance to start looking! Thank you both so much, I'll buy both multiple beers should we ever meet. Peter - -- Peter O'Gorman - http://www.pogma.com -BEGI

Re: libtool audit

2003-12-18 Thread Gary V. Vaughan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Scott James Remnant wrote: | By using my own subversion mirror which spanned the compromise, I've | been able to make this slightly easier for myself when it came to the | moved files. Still bloody tedious work, and I think I've gone | cross-eyed now.

Re: libtool audit

2003-12-17 Thread Scott James Remnant
On Wed, 2003-12-17 at 17:23, Gary V. Vaughan wrote: > Argh. I am beginning to resent the amount of admin I am doing in what would > otherwise be my hacking time :-( > > It's difficult, tedious and error prone. > By using my own subversion mirror which spanned the compromise, I've been able to m

libtool audit

2003-12-17 Thread Gary V. Vaughan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Bob Friesenhahn wrote: | If the date that savannah was compromised is well known, then it seems | that examining CVS diffs since that date is the best approach. | Unfortunately, it is very easy to compromise shell code in ways which | are not obvious.