Re: Making releases

[Tony Cox - (415)926-3105 <tcox@ssrl01.slac.stanford.edu>]

Bob writes:-

>There have been a number of security problems on the net lately. It appears
>that there is a rather sophisticated array of web sniffers that are pulling
>passwords and accounts off of the net. This makes the way we are doing 
>distribution a large problem for anyone recieving a release. I think that
>it amy be best to just provide a read protected directory in an anonymous
>ftp account. 
>
>Please have your system managers check for break-ins. We have seen the
>replacement of the Unix tools - like ls and pwd - to mask the presence 
>of hacker accounts. There are also directories like ... that contain
>hacker tools. 
>
>This is really becoming a pain in the butt. All ideas welcome.
>
>Any comments, suggestions, rude criticisms???

PGP encrypting the tar files seems practical. The base components can be
decrypted in around 4 minutes on a 30 specmark machine. Does a reasonable job
of compression also.

Tony
--------------------------------------------------------------------------------
Dr Anthony D Cox
Computer Systems Specialist
Stanford Synchrotron Radiation Laboratory
Stanford Linear Accelerator Center
MS 69, Box 4349
Stanford CA 94305
tcox@ssrl01.slac.stanford.edu
--------------------------------------------------------------------------------