bugtraq - Re: heanet.dl.sourceforge.net hacked?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Wed, 30 Apr 2008 18:15:15 +0200
From: Pieter de Boer <pieter@...darkside.nl>
To: Michael Scheidell <scheidell@...nap.net>
Cc: bugtraq@...urityfocus.com
Subject: Re: heanet.dl.sourceforge.net hacked?

Michael Scheidell wrote:

> (note below, libpng says file size for libpng-1.2.27.tar.bz2 with 
> scripts should be 641193)  heanet has a bigger file.
> other sourceforge.net mirrors have it right.
> 
I've pulled the file from the SURFnet and University of Kent mirrors and 
the simplesystems.org mirror referenced on the site. All have the same 
804821 bytes big file. The tar.gz also doesn't match.

If you have the right and the supposedly wrong version, why not untar 
them and diff them to see what the differences are?

-- 
Pieter