Re: FAKE: Fedora Extras shipped popular package with rootkit and more than ten thousands systems were infected (was Re: Summary from last weeks FESCo meeting)

["Jose' Matos" <jamatos fc up pt>]

On Thursday 01 June 2006 16:00, Thorsten Leemhuis wrote:
> I would even sleep really good if there would be a mechanism that checks
> md5sum's against upstream packages. But that's quite complicated to
> implement and might be to much overhead.

  Then change that from md5 to sha1 if you want to be in the safe side. :-)

-- 
José Abílio