On 07/07/2024 03:46, Yang Yu Lin via Cygwin wrote:
When running setup on my device (Windows 11, connected with 2 screens
which use different DPI revolutions), the setup appears bluury on my
secondary screen (not on the primary screen).
Because current setup.exe.manifest just set the dpiAware
When running setup on my device (Windows 11, connected with 2 screens which use
different DPI revolutions), the setup appears bluury on my secondary screen
(not on the primary screen).
Because current setup.exe.manifest just set the dpiAware element, which causes
the setup cannot handle
Thank you for your response about the shortcuts... And double-clicks (which
can be a ton when installing anew, as I figured).
> Doubleclick in "New" column toggles between "Skip" or "Keep" and the
> "preferred version". Ctrl+I selects the latter.and moves to the next row.
What if I don't need
Hi,
Lavrentiev, Anton wrote
...
For new installations, it'd be great to have the most suitable (in most cases,
the most
recent) version shown as the first selection in all those pulldown version
lists in
the "New" columns. The logical order would be "the preferred (latest) version",
"the
Hi All,
I already tried to bring this up, but it looks like it was either ignored or
just slipped
through the cracks...
I have a few suggestions that IMHO would make Setup a teeny-bit user-friendlier.
Having to (re-)install Cygwin is probably the most dreaded action for
everybody, and
dealing
On 2024-01-07 08:10, Dan Shelton via Cygwin wrote:
Can someone provide a list of TCP ports which must be open in the
outgoing firewall settings, so Cygwin setup.exe can fetch data from
mirror.kernel.org?
You should not just use the US default mirrors.kernel.org on the west coast in
San Jose
Greetings, Dan Shelton!
> Can someone provide a list of TCP ports which must be open in the
> outgoing firewall settings, so Cygwin setup.exe can fetch data from
> mirror.kernel.org?
Standard HTTP ports. 80/443
--
With best regards,
Andrey Repin
Sunday, January 7, 2024 23:20:38
Sor
Hello!
Can someone provide a list of TCP ports which must be open in the
outgoing firewall settings, so Cygwin setup.exe can fetch data from
mirror.kernel.org?
Dan
--
Dan Shelton - Cluster Specialist Win/Lin/Bsd
--
Problem reports: https://cygwin.com/problems.html
FAQ
Hey there.
Now that sourceware seems to be under he SFC umbrella, I assume Cygwin
is so as well?
If so, could it perhaps be reconsidered, whether funding (from SFC)
can be found for buying some signing certs for setup.exe?
Regards,
Philippe.
On Thu, Apr 13, 2023 at 2:00 AM Philippe Cerfon
Hey.
On Wed, Apr 12, 2023 at 3:35 PM Andrey Repin wrote:
> msgid:camu-taupf3dzpye3xj0f_gyrchzprxjxbyafd6tt9my+a7j...@mail.gmail.com
I assume nothing came out of the SFC member thingy discussed back then
in that thread?
> And earlier mails on the subject.
Perhaps this would be an item for the
Greetings, Philippe Cerfon!
> Hey there.
> I know you provide OpenPGP signatures for verification (which is good,
> and should be kept), but would it perhaps make sense to have setup.exe
> signed (in the sense of: by some MS trusted certificate) and/or in the
> MS store
Hey there.
I know you provide OpenPGP signatures for verification (which is good,
and should be kept), but would it perhaps make sense to have setup.exe
signed (in the sense of: by some MS trusted certificate) and/or in the
MS store (though I guess that might not be possible with their
policy
Hi Thorsten,
On Nov 29 15:23, Fuchs, Thorsten via Cygwin wrote:
> Hi,
>
> We are using the setup-x86_64.exe within our deployment system to
> install Cygwin at the developer workstations. The setup run is
> triggered automatically and all developer workstation going to be
> install identically.
On Mon, 29 Nov 2021 at 15:24, Fuchs, Thorsten via Cygwin
wrote:
> We are using the setup-x86_64.exe within our deployment system to install
> Cygwin at the developer workstations. The setup run is triggered
> automatically and all developer workstation going to be install identically.
>
Hi,
We are using the setup-x86_64.exe within our deployment system to install
Cygwin at the developer workstations. The setup run is triggered automatically
and all developer workstation going to be install identically. However, when
the setup window is open and the install is in progress it
l option work? I ran it on a regular Windows directory (to
>> my knowledge).
If you have used Cygwin wget to download setup.exe, and Cygwin had "acl"
option for the target directory, it won't set +x automatically.
--
With best regards,
Andrey Repin
Tuesday, December 8, 2020 9:38:0
How does this acl option work? Im on Win 10 Home.
On Thu, Apr 16, 2020 at 9:10 AM o lu wrote:
> How does the acl option work? I ran it on a regular Windows directory (to
> my knowledge).
>
> Your english is fine.
>
> On Thu, Apr 16, 2020 at 4:20 AM Andrey Repin wrote:
>
>> Greetings, o lu!
>>
On 27/08/2020 13:48, Michael Wild via Cygwin wrote:
Hmm, OK, changing script.cc to not strip out CYGWIN is trivial. But the
harder part is that main.cc uses ShellExecuteEx() with
SHELLEXECUTEINFO.verb set to "runas" in order to re-run setup elevated.
This resets all environment variables back to
On Sun, 30 Aug 2020, 22:24 Jon Turney wrote:
> On 27/08/2020 06:48, Michael Wild via Cygwin wrote:
> > On Wed, Aug 26, 2020 at 10:57 PM Jon Turney wrote:
> >>
> >> However, even if that's fixed, there's no value for winsymlinks in
> >> CYGWIN env var to specify the behaviour of Cygwin 3.1.4 and
On 27/08/2020 06:48, Michael Wild via Cygwin wrote:
On Wed, Aug 26, 2020 at 10:57 PM Jon Turney wrote:
However, even if that's fixed, there's no value for winsymlinks in
CYGWIN env var to specify the behaviour of Cygwin 3.1.4 and previous
(i.e. always create traditional symlinks, don't use WSL
On 27/08/2020 13:49, Michael Wild via Cygwin wrote:
On Thu, Aug 27, 2020 at 2:48 PM Michael Wild wrote:
[...] I attached this fix as a patch. [...]
Thanks. Applied.
--
Problem reports: https://cygwin.com/problems.html
FAQ: https://cygwin.com/faq/
Documentation:
On Thu, Aug 27, 2020 at 2:48 PM Michael Wild wrote:
>
>
> [...] I attached this fix as a patch. [...]
>
>
No, I didn't...
0001-Keep-CYGWIN-environment-variable-when-running-script.patch
Description: Binary data
--
Problem reports: https://cygwin.com/problems.html
FAQ:
On Thu, Aug 27, 2020 at 11:44 AM Michael Wild wrote:
>
> On Thu, Aug 27, 2020 at 11:02 AM Corinna Vinschen wrote:
>
>> On Aug 27 07:48, Michael Wild via Cygwin wrote:
>> > On Wed, Aug 26, 2020 at 10:57 PM Jon Turney wrote:
>> >
>> > >
>> > > It turns out to be the case that setup doesn't
Greetings, Corinna Vinschen!
> On Aug 27 07:48, Michael Wild via Cygwin wrote:
>> On Wed, Aug 26, 2020 at 10:57 PM Jon Turney wrote:
>>
>> >
>> > It turns out to be the case that setup doesn't propagate the CYGWIN
>> > environment variable into the environment for scripts it runs, so
>> >
On Thu, Aug 27, 2020 at 11:02 AM Corinna Vinschen wrote:
> On Aug 27 07:48, Michael Wild via Cygwin wrote:
> > On Wed, Aug 26, 2020 at 10:57 PM Jon Turney wrote:
> >
> > >
> > > It turns out to be the case that setup doesn't propagate the CYGWIN
> > > environment variable into the environment for
On Aug 27 07:48, Michael Wild via Cygwin wrote:
> On Wed, Aug 26, 2020 at 10:57 PM Jon Turney wrote:
>
> >
> > It turns out to be the case that setup doesn't propagate the CYGWIN
> > environment variable into the environment for scripts it runs, so
> > setting that isn't going to make any
On Wed, Aug 26, 2020 at 10:57 PM Jon Turney wrote:
>
> It turns out to be the case that setup doesn't propagate the CYGWIN
> environment variable into the environment for scripts it runs, so
> setting that isn't going to make any difference. That should probably
> be considered a bug.
>
>
On 26/08/2020 19:29, Achim Gratz wrote:
Michael Wild via Cygwin writes:
Is there a way to disable WSL symlinks when installing Cygwin with
setup.exe? Problem is that Docker on Windows apparently doesn't support
them (see https://github.com/moby/moby/issues/41058). I would like to use
On Wed, Aug 26, 2020 at 9:06 PM Michael Wild wrote:
>
>
> On Wed, Aug 26, 2020 at 8:31 PM Achim Gratz wrote:
>
>> Michael Wild via Cygwin writes:
>> > Is there a way to disable WSL symlinks when installing Cygwin with
>> > setup.exe? Problem is that Docker o
On Wed, Aug 26, 2020 at 8:31 PM Achim Gratz wrote:
> Michael Wild via Cygwin writes:
> > Is there a way to disable WSL symlinks when installing Cygwin with
> > setup.exe? Problem is that Docker on Windows apparently doesn't support
> > them (see https://github.com/moby/moby/i
Michael Wild via Cygwin writes:
> Is there a way to disable WSL symlinks when installing Cygwin with
> setup.exe? Problem is that Docker on Windows apparently doesn't support
> them (see https://github.com/moby/moby/issues/41058). I would like to use a
> custom Docker image for Gi
Hi Andrey
On Wed, Aug 26, 2020 at 5:20 PM Andrey Repin wrote:
> Greetings, Michael Wild!
>
> > Is there a way to disable WSL symlinks when installing Cygwin with
> > setup.exe? Problem is that Docker on Windows apparently doesn't support
> > them (see https://github.co
Greetings, Michael Wild!
> Is there a way to disable WSL symlinks when installing Cygwin with
> setup.exe? Problem is that Docker on Windows apparently doesn't support
> them (see https://github.com/moby/moby/issues/41058). I would like to use a
> custom Docker image for Gi
Hi all
Is there a way to disable WSL symlinks when installing Cygwin with
setup.exe? Problem is that Docker on Windows apparently doesn't support
them (see https://github.com/moby/moby/issues/41058). I would like to use a
custom Docker image for GitHub Actions to reproducibly build my packages
How does the acl option work? I ran it on a regular Windows directory (to
my knowledge).
Your english is fine.
On Thu, Apr 16, 2020 at 4:20 AM Andrey Repin wrote:
> Greetings, o lu!
>
> > It worked, but I dont understand on Windows
>
> If you have downloaded it into a directory mounted with
Greetings, o lu!
> It worked, but I dont understand on Windows
If you have downloaded it into a directory mounted with "acl" option, POSIX
behavior apply.
--
With best regards,
Andrey Repin
Thursday, April 16, 2020 11:06:22
Sorry for my terrible english...
--
Problem reports:
It worked, but I dont understand on Windows
--
Problem reports: https://cygwin.com/problems.html
FAQ: https://cygwin.com/faq/
Documentation:https://cygwin.com/docs.html
Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple
On 2020-04-14 04:43, o lu via Cygwin wrote:
> When downloaded with cygwin wget
> On Tue, Apr 14, 2020 at 3:34 AM o lu wrote:
>> Windows cannot access the specified device, path, or file...
>> with latest setup.exe
Which:
https://cygwin.com/setup-x86_64.exe
or
When downloaded with cygwin wget
On Tue, Apr 14, 2020 at 3:34 AM o lu wrote:
> Windows cannot access the specified device...
>
> Windows cannot access the specified device, path, or file with
> latest setup.exe
>
--
Problem reports: https://cygwin.com/pr
Windows cannot access the specified device...
Windows cannot access the specified device, path, or file with
latest setup.exe
--
Problem reports: https://cygwin.com/problems.html
FAQ: https://cygwin.com/faq/
Documentation:https://cygwin.com/docs.html
he
process disappear. Then I start the process (mintty or setup.exe) again
- always successfully.
This morning it was setup.exe with 5 updates. They were still
in the "Pending" Category after restart. But sometimes I'm
working for an hour or so changing my cygwin setup. And in such
a case all t
Brian,
All-volunteer. I understand that well, and have been using Cygwin for
a long long time.
The volunteers love what they do, and I try to be as respectful as
possible when suggesting changes, changes mean more work for them.
I'm satisfied with this thread.
Thanks Achim, Jon, and to any
On 2019-06-11 14:52, Keith Christian wrote:
> On Tue, Jun 11, 2019 at 12:39 PM Brian Inglis wrote:
>> On 2019-06-11 11:19, Achim Gratz wrote:
>>> Keith Christian writes:
Would the maintainers (Achim? Jon?) be willing to consider an option
box log errors to the setup.log file and "Skip
Thanks for the feedback.
Even if a file were missing that might cause issues in a few
dependency chains, why not allow the install to continue?
Suppose a file was missing halfway through? Why stop the whole
install for the sake of a few missing files? Let the install continue
for those
On 2019-06-11 11:19, Achim Gratz wrote:
> Keith Christian writes:
>> Would the maintainers (Achim? Jon?) be willing to consider an option
>> box log errors to the setup.log file and "Skip non-fatal errors and
>> continue?"
>
> You'd first have to teach setup to distinguish between fatal and
>
Keith Christian writes:
> Would the maintainers (Achim? Jon?) be willing to consider an option
> box log errors to the setup.log file and "Skip non-fatal errors and
> continue?"
You'd first have to teach setup to distinguish between fatal and
non-fatal errors. A missing package archive is
Greetings, Keith Christian!
> Today I am reinstalling Cygwin to fix a DLL package, taking awhile but
> worth the wait (-: (-:
> Setup paused with a dialog to report a missing .xz file. I saw the
> error a half hour later.
> Would the maintainers (Achim? Jon?) be willing to consider an
On 2019-06-11 05:27, Keith Christian wrote:
> On Tue, Jun 11, 2019 at 2:03 AM Henning wrote:
>> On 10/06/2019 23:41, Keith Christian wrote:
>>> Would the maintainers (Achim? Jon?) be willing to consider an option box
>>> log errors to the setup.log file and "Skip non-fatal errors and
>>>
And if this option is deemed worthy of implementation, add a command
line option for those who skip the GUI.
Thanks again.
On Tue, Jun 11, 2019 at 2:03 AM Henning wrote:
>
> On 10/06/2019 23:41, Keith Christian wrote:
> >
> > Would the maintainers (Achim? Jon?) be willing to consider an option
On 10/06/2019 23:41, Keith Christian wrote:
Would the maintainers (Achim? Jon?) be willing to consider an option
box log errors to the setup.log file and "Skip non-fatal errors and
continue?"
either this, or a prompt asking if the user wants to continue or abort.
Henning
--
Problem
Today I am reinstalling Cygwin to fix a DLL package, taking awhile but
worth the wait (-: (-:
Setup paused with a dialog to report a missing .xz file. I saw the
error a half hour later.
Would the maintainers (Achim? Jon?) be willing to consider an option
box log errors to the setup.log file
Csaba Raduly, on Sunday, May 19, 2019 04:37 AM, wrote...
>On Sun, May 19, 2019 at 4:57 AM Jack wrote:
>>
>> On 5/18/19 9:24 PM, Jose Isaias Cabrera wrote:
>> > How do I uninstall the installation that I created with the building of
>> > gcc6? I did a search on duckduckgo for,
>> >
>> > cygwin
On Sun, May 19, 2019 at 4:57 AM Jack wrote:
>
> On 5/18/19 9:24 PM, Jose Isaias Cabrera wrote:
> > How do I uninstall the installation that I created with the building of
> > gcc6? I did a search on duckduckgo for,
> >
> > cygwin how to uninstall gcc after building it
> >
> > and found nothing
On 5/18/19 9:24 PM, Jose Isaias Cabrera wrote:
How do I uninstall the installation that I created with the building of gcc6? I
did a search on duckduckgo for,
cygwin how to uninstall gcc after building it
and found nothing that could help me. Right now I have two installs of gcc:
v7.4.and
From: cygwin-ow...@cygwin.com on behalf of Jose
Isaias Cabrera
Sent: Saturday, May 18, 2019 07:15 PM
To: Ken Brown; cygwin@cygwin.com
Subject: Re: How to install gcc and g++ 6 on cygwin which are not on the
setup.exe
Ken Brown, on Saturday, May 18, 2019 11:54 AM, wrote...
>On 5/18/2019 8:19
Ken Brown, on Saturday, May 18, 2019 11:54 AM, wrote...
>On 5/18/2019 8:19 AM, Jose Isaias Cabrera wrote:
> > I am finished and now to start building Bedrockdb. Thanks.
>
> By the way, you're not the only person building Bedrockdb on Cygwin. Someone
> has posted about 10 fixes in the last few
On Sat, May 18, 2019 at 5:55 PM Ken Brown wrote:
>
> On 5/18/2019 8:19 AM, Jose Isaias Cabrera wrote:
> > I am finished and now to start building Bedrockdb. Thanks.
>
> By the way, you're not the only person building Bedrockdb on Cygwin. Someone
> has posted about 10 fixes in the last few days:
On 5/18/2019 8:19 AM, Jose Isaias Cabrera wrote:
> I am finished and now to start building Bedrockdb. Thanks.
By the way, you're not the only person building Bedrockdb on Cygwin. Someone
has posted about 10 fixes in the last few days:
https://github.com/Expensify/Bedrock/issues
It looks
Csaba Raduly, on Saturday, May 18, 2019 02:50 AM, wrote...
>On Sat, May 18, 2019 at 7:14 AM Brian Inglis wrote:
>>
>> On 2019-05-17 21:18, Jose Isaias Cabrera wrote:
>> > After more than 8 hours running, building gcc-6.4.0, this error popped up:
>> > In file included from
Brian Inglis, on Saturday, May 18, 2019 01:14 AM, wrote...
On 2019-05-17 21:18, Jose Isaias Cabrera wrote:
> After more than 8 hours running, building gcc-6.4.0, this error popped up:
> In file included from ../.././libjava/jni-libjvm.cc:14:0:
> ../.././libjava/include/jvm.h:795:3: error:
Doug Henderson, Saturday, May 18, 2019 01:12 AM, wrote...
>On Wed, 15 May 2019 at 14:58, Jose Isaias Cabrera <> wrote:
>You seem to be having some difficulty getting an older version of the
>compiler running. Perhaps it might be useful to go back to the
>beginning and see if there is an
Sent: Friday, May 17, 2019 11:18 PM
To: cygwin@cygwin.com; m...@cs.umass.edu
Subject: Re: How to install gcc and g++ 6 on cygwin which are not on the
setup.exe
After more than 8 hours running, building gcc-6.4.0, this error popped up:
In file included from ../.././libjava/jni-libjvm.cc:14:0
On Sat, May 18, 2019 at 7:14 AM Brian Inglis wrote:
>
> On 2019-05-17 21:18, Jose Isaias Cabrera wrote:
> > After more than 8 hours running, building gcc-6.4.0, this error popped up:
> > In file included from ../.././libjava/jni-libjvm.cc:14:0:
> > ../.././libjava/include/jvm.h:795:3: error:
On 2019-05-17 21:18, Jose Isaias Cabrera wrote:
> After more than 8 hours running, building gcc-6.4.0, this error popped up:
> In file included from ../.././libjava/jni-libjvm.cc:14:0:
> ../.././libjava/include/jvm.h:795:3: error: ‘ParkHelper’ does not name a type
> ParkHelper park_helper;
> Did a
On Wed, 15 May 2019 at 14:58, Jose Isaias Cabrera <> wrote:
> Is there a way an easy way to install gcc-6 and g++-6 on cygwin? I just
> uninstalled v7.4.x or whatever was on the setup. I am trying to build a
> software and gcc 7.x and g++ 7.x is giving too many compiler errors. I want
> to
After more than 8 hours running, building gcc-6.4.0, this error popped up:
In file included from ../.././libjava/jni-libjvm.cc:14:0:
../.././libjava/include/jvm.h:795:3: error: ‘ParkHelper’ does not name a type
ParkHelper park_helper;
Did a few duckduckgo searches and nothing helpfult was
Eliot Moss, on Friday, May 17, 2019 09:16 AM, wrote...
[clip]
>I've been a Cygwin user for a long time, and I like it, but
>another possibility here for you is WSL (Windows Subsystem
>for Linux). It's a pretty easy install, and because it is
>done by Microsoft and can reliably use internal
On 5/16/2019 11:28 PM, Jose Isaias Cabrera wrote:
Csaba Ráduly, on Thursday, May 16, 2019 05:47 PM, wrote...
BTW, if you're trying to build Bedrockdb, G++ 6 is likely unable to help you.
The Bedrockdb developers seem to suffer a bit from "all the world is Linux"
syndrome.
Yeah. Seems like
Csaba Ráduly, on Thursday, May 16, 2019 05:47 PM, wrote...
>Hi José,
Hi Csaba.
>Building GMP, MPFR and MPC seems like overkill. The following packages are
>available for Cygwin:
>
>libgmp-devel 6.1.2
>libmpfr-devel 4.0.2
>libmpc-devel 1.1.0
Yep, tried these, and for some reason, when I ran
Hi José,
On 16/05/2019 18:47, Jose Isaias Cabrera wrote:
Csaba Raduly, on Thursday, May 16, 2019 03:36 AM, wrote...
>
>Hi José,
>Another option is to download the source and build it yourself.
Yep. Going with this option. Seems the most logical one for now. After
running ./configure,
Csaba Raduly, on Thursday, May 16, 2019 03:36 AM, wrote...
>
>Hi José,
>Another option is to download the source and build it yourself.
Yep. Going with this option. Seems the most logical one for now. After
running ./configure, got this error,
configure: error: Building GCC requires GMP
Hi Jose,
On Wed, May 15, 2019 at 10:58 PM Jose Isaias Cabrera wrote:
>
>
> Greetings.
>
> Is there a way an easy way to install gcc-6 and g++-6 on cygwin? I just
> uninstalled v7.4.x or whatever was on the setup. I am trying to build a
> software and gcc 7.x and g++ 7.x is giving too many
Greetings.
Is there a way an easy way to install gcc-6 and g++-6 on cygwin? I just
uninstalled v7.4.x or whatever was on the setup. I am trying to build a
software and gcc 7.x and g++ 7.x is giving too many compiler errors. I want to
try 6 to see if these errors minimize or go away.
ents for the updates of setup_xx.exe do
> > not include the checksums.
>
> The root of trust for setup.exe and the whole of the Cygwin installation
> is the GPG key for cygwin@cygwin.com and the integrity of the
> sourceware.org server hosting the original files, not the checksum of
> a
on the use of multiple sources, using cygwin as
an example, but the announcements for the updates of setup_xx.exe do
not include the checksums.
The root of trust for setup.exe and the whole of the Cygwin installation
is the GPG key for cygwin@cygwin.com and the integrity of the
sourceware.org server
When bootstrapping a chain of trust, having multiple sources for the
checksum values is significantly better than starting blind.
I'm writing a blogpost on the use of multiple sources, using cygwin as
an example, but the announcements for the updates of setup_xx.exe do
not include the checksums.
https://sourceware.org/bugzilla/show_bug.cgi?id=22132
--- Comment #1 from Frédéric Buclin ---
The content of attachment 10413 has been deleted for the following reason:
suspicious code
--
You are receiving this mail because:
You are the assignee for the bug.
On Apr 16 09:19, Houder wrote:
> L.S.,
>
> Setup.exe writes "user defaults" to /etc/setup/setup.rc in the root
> directory. Among these user defaults (which should override program
> defaults) are "last-action" and "last-cache".
>
> las
L.S.,
Setup.exe writes "user defaults" to /etc/setup/setup.rc in the root
directory. Among these user defaults (which should override program
defaults) are "last-action" and "last-cache".
last-cache is an alias for the Local Package Directory (abbreviated
to l
L.S.,
While implementing a solution for the problem described here:
https://cygwin.com/ml/cygwin/2019-04/msg00032.html
( Setup: why consult registry (rootdir) if -R has been specified? )
I discovered a bug in main.cc (setup.exe).
At startup, setup.exe writes the following report
On Fri, Mar 15, 2019 at 8:25 AM Brian Inglis wrote:
> ... corporate policies, proxies, firewalls, security products.
> Systems or images older than a year may need the new root CA installed - some
> enterprises are very selective about including support for anything in their
> images - and users
> client, for the one-time operation of downloading setup.exe. What are
> they using, a TRS-80?
I never said it was a person nor that they did not have access to a TLS client.
I said they could not use a TLS client, which could be because of platform
deficiencies, corporate policies, proxies, f
Greetings, Lee!
> On 3/12/19, Andrey Repin wrote:
>> Greetings, Lee!
>>
It gives you false sense of security. What is worse, everybody is
attempting
to reassure this false sense on every possible occasion.
>>
>>> I don't think it's a false sense of security. https:// isn't "safe"
deal world. But at least in my experience, most windows
>> software doesn't come with a pgp signature & using a separate channel
>> to get the pgp key isn't so easy.
>
> In my experience, this is a Cygwin mailing list and we're discussing issues
> of obtaining and verifying
On 3/12/19, Andrey Repin wrote:
> Greetings, Lee!
>
>>> It gives you false sense of security. What is worse, everybody is
>>> attempting
>>> to reassure this false sense on every possible occasion.
>
>> I don't think it's a false sense of security. https:// isn't "safe"
>> but it is _safer_ than
re doesn't come with a pgp signature & using a separate channel
> to get the pgp key isn't so easy.
In my experience, this is a Cygwin mailing list and we're discussing issues
of obtaining and verifying the authenticity of setup.exe.
P.S.
In regard to Cygwin mailing list, please teach your
Greetings, Lee!
>> It gives you false sense of security. What is worse, everybody is
>> attempting
>> to reassure this false sense on every possible occasion.
> I don't think it's a false sense of security. https:// isn't "safe"
> but it is _safer_ than http://
Yep. Now, let's recall mcafee,
On 3/12/19, Achim Gratz wrote:
> Lee writes:
>> I don't think it's a false sense of security. https:// isn't "safe"
>> but it is _safer_ than http://
>
> Unless you are in an environment where an extra root cert is injected
> just to be able to break up the encrypted connection. Which is a lot
>
On 3/12/19, Andrey Repin wrote:
> Greetings, Lee!
>
>>> Which is way worse in my opinion, than any theoretical MITM attack,
>>> which
>>> is easily mitigated with proper validation of your downloads.
>
>> Serious question - exactly how does one do "proper validation of your
>> downloads"?
>
> Use
Lee writes:
> I don't think it's a false sense of security. https:// isn't "safe"
> but it is _safer_ than http://
Unless you are in an environment where an extra root cert is injected
just to be able to break up the encrypted connection. Which is a lot
more common than people think and is not
Greetings, Lee!
>> Which is way worse in my opinion, than any theoretical MITM attack, which
>> is easily mitigated with proper validation of your downloads.
> Serious question - exactly how does one do "proper validation of your
> downloads"?
Use PGP signature to validate the installer. Use
gt;
>> > This is my opinion only of course, but if cygwin wants to have any
>> > security credibility, it should simply disallow non-SSL downloads of
>> > setup.exe. Otherwise the chain of authenticity is broken forever.
>>
>> They sign setup.exe, so "the chain of a
, but if cygwin wants to have any
>> security credibility, it should simply disallow non-SSL downloads of
>> setup.exe. Otherwise the chain of authenticity is broken forever.
>
> All the SSL stuff is build on idea of implicit unlimited trust.
I agree, the whole certificate authority bit s
Archie Cobbs writes:
> Downloading the sig file over HTTP is useless... any attacker going to
> the trouble to launch a MITM attack for setup.exe will certainly also
> do it for the sig file as well.
No, the signature would be rejected if you cared to actually check the
key and signatu
> a
> performance and support burden compared to allowing both HTTP:80 and
> HTTPS:443.
OK. Personally I have trouble believing any such person exists. That
is, a person who has access to an HTTP client, but not an HTTPS
client, for the one-time operation of downloading setup.exe. What are
th
my opinion only of course, but if cygwin wants to have any
>>> security credibility, it should simply disallow non-SSL downloads of
>>> setup.exe. Otherwise the chain of authenticity is broken forever.
>> They sign setup.exe, so "the chain of authenticity" is t
t; security credibility, it should simply disallow non-SSL downloads of
> > setup.exe. Otherwise the chain of authenticity is broken forever.
>
> They sign setup.exe, so "the chain of authenticity" is there regardless.
> https://cygwin.com/setup-x86_64.exe
> https://
How could that reduce security?
> (sigh)
> I must say I'm surprised so many people think it's a good idea to
> leave cygwin open to trivial MITM attacks, which is the current state
> of affairs.
> This is my opinion only of course, but if cygwin wants to have any
> security cre
nk it's a good idea to
> leave cygwin open to trivial MITM attacks, which is the current state
> of affairs.
But it's only open to a trivial MITM attack if the user types in
"http://cygwin.com; - correct? Why isn't the fix "don't do that"?
> This is my opinion only of
hink it's a good idea to
leave cygwin open to trivial MITM attacks, which is the current state
of affairs.
This is my opinion only of course, but if cygwin wants to have any
security credibility, it should simply disallow non-SSL downloads of
setup.exe. Otherwise the chain of authenticity is broken for
1 - 100 of 4428 matches
Mail list logo
