Xref: utzoo comp.sources.d:6155 news.admin:11534 Path: utzoo!utgpu!watserv1!watmath!att!pacbell.com!ucsd!usc!elroy.jpl.nasa.gov!ncar!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!pitt!darth!investor.pgh.pa.us!rbp From: rbp@investor.pgh.pa.us (Bob Peirce #305) Newsgroups: comp.sources.d,news.admin Subject: Re: shar corruption on TRN posting Keywords: shar, corruption, hacking? Message-ID: <1990Dec12.165932.5424@investor.pgh.pa.us> Date: 12 Dec 90 16:59:32 GMT References: <140@mx-1> Reply-To: rbp@investor.pgh.pa.us (Bob Peirce #305) Organization: Cookson, Peirce & Co., Pittsburgh, PA Lines: 26 In article <140@mx-1> ar@mcdd1 (Alastair Rae) writes: > >I've just downloaded TRN from comp.sources.unix. 13 of its 14 parts >were coherent shell-archives but part 9's tail-end was wrong. This >was different to all the other parts which output a sequence number to >a temp file so as to keep the shars in order. > >OK, I can get round that but it got me thinking. I wondered what >happened to corrupt the shar? Maybe the posting was corrupt in the >first place but my main worry is this: > > How can I be certain that a shar archive is what it claims to be? > > How do I know that it hasn't been interfered with along the net? > > When some tempting piece of software lands up at my end of the net, > how do I know that it's safe to unpack, never mind compile & run? > >Am I just being paranoid? Well, Part09/14 was reposted and, while a complete shar file, it seemed to have nothing much to do with Parts 1-8,10-14. Part 08 did not continue into it and Part 10 did not continue from it. -- Bob Peirce, Pittsburgh, PA 412-471-5320 ...!uunet!pitt!investor!rbp rbp@investor.pgh.pa.us