Greetings!
Just an idea: setup.exe already has 2 options to put the MinTTY icon
on the Desktop&Start Menu. Could the same be done to put MinTTY into
the task bar, please?
Mark
--
IT Infrastructure Consultant
Windows, Linux
--
Problem reports: https://cygwin.com/problems.html
On 07/07/2024 03:46, Yang Yu Lin via Cygwin wrote:
When running setup on my device (Windows 11, connected with 2 screens
which use different DPI revolutions), the setup appears bluury on my
secondary screen (not on the primary screen).
Because current setup.exe.manifest just set the dpiAware ele
When running setup on my device (Windows 11, connected with 2 screens which use
different DPI revolutions), the setup appears bluury on my secondary screen
(not on the primary screen).
Because current setup.exe.manifest just set the dpiAware element, which causes
the setup cannot handle differe
Thank you for your response about the shortcuts... And double-clicks (which
can be a ton when installing anew, as I figured).
> Doubleclick in "New" column toggles between "Skip" or "Keep" and the
> "preferred version". Ctrl+I selects the latter.and moves to the next row.
What if I don't need t
Hi,
Lavrentiev, Anton wrote
...
For new installations, it'd be great to have the most suitable (in most cases,
the most
recent) version shown as the first selection in all those pulldown version
lists in
the "New" columns. The logical order would be "the preferred (latest) version",
"the vers
Hi All,
I already tried to bring this up, but it looks like it was either ignored or
just slipped
through the cracks...
I have a few suggestions that IMHO would make Setup a teeny-bit user-friendlier.
Having to (re-)install Cygwin is probably the most dreaded action for
everybody, and
dealing
On 2024-01-07 08:10, Dan Shelton via Cygwin wrote:
Can someone provide a list of TCP ports which must be open in the
outgoing firewall settings, so Cygwin setup.exe can fetch data from
mirror.kernel.org?
You should not just use the US default mirrors.kernel.org on the west coast in
San Jose
Greetings, Dan Shelton!
> Can someone provide a list of TCP ports which must be open in the
> outgoing firewall settings, so Cygwin setup.exe can fetch data from
> mirror.kernel.org?
Standard HTTP ports. 80/443
--
With best regards,
Andrey Repin
Sunday, January 7, 2024 23:20:38
Sor
Hello!
Can someone provide a list of TCP ports which must be open in the
outgoing firewall settings, so Cygwin setup.exe can fetch data from
mirror.kernel.org?
Dan
--
Dan Shelton - Cluster Specialist Win/Lin/Bsd
--
Problem reports: https://cygwin.com/problems.html
FAQ
Hey there.
Now that sourceware seems to be under he SFC umbrella, I assume Cygwin
is so as well?
If so, could it perhaps be reconsidered, whether funding (from SFC)
can be found for buying some signing certs for setup.exe?
Regards,
Philippe.
On Thu, Apr 13, 2023 at 2:00 AM Philippe Cerfon
Hey.
On Wed, Apr 12, 2023 at 3:35 PM Andrey Repin wrote:
> msgid:camu-taupf3dzpye3xj0f_gyrchzprxjxbyafd6tt9my+a7j...@mail.gmail.com
I assume nothing came out of the SFC member thingy discussed back then
in that thread?
> And earlier mails on the subject.
Perhaps this would be an item for the F
Greetings, Philippe Cerfon!
> Hey there.
> I know you provide OpenPGP signatures for verification (which is good,
> and should be kept), but would it perhaps make sense to have setup.exe
> signed (in the sense of: by some MS trusted certificate) and/or in the
> MS store (thou
Hey there.
I know you provide OpenPGP signatures for verification (which is good,
and should be kept), but would it perhaps make sense to have setup.exe
signed (in the sense of: by some MS trusted certificate) and/or in the
MS store (though I guess that might not be possible with their
policy
Hi Thorsten,
On Nov 29 15:23, Fuchs, Thorsten via Cygwin wrote:
> Hi,
>
> We are using the setup-x86_64.exe within our deployment system to
> install Cygwin at the developer workstations. The setup run is
> triggered automatically and all developer workstation going to be
> install identically. H
On Mon, 29 Nov 2021 at 15:24, Fuchs, Thorsten via Cygwin
wrote:
> We are using the setup-x86_64.exe within our deployment system to install
> Cygwin at the developer workstations. The setup run is triggered
> automatically and all developer workstation going to be install identically.
> However
Hi,
We are using the setup-x86_64.exe within our deployment system to install
Cygwin at the developer workstations. The setup run is triggered automatically
and all developer workstation going to be install identically. However, when
the setup window is open and the install is in progress it is
he acl option work? I ran it on a regular Windows directory (to
>> my knowledge).
If you have used Cygwin wget to download setup.exe, and Cygwin had "acl"
option for the target directory, it won't set +x automatically.
--
With best regards,
Andrey Repin
Tuesday, December 8, 2
How does this acl option work? Im on Win 10 Home.
On Thu, Apr 16, 2020 at 9:10 AM o lu wrote:
> How does the acl option work? I ran it on a regular Windows directory (to
> my knowledge).
>
> Your english is fine.
>
> On Thu, Apr 16, 2020 at 4:20 AM Andrey Repin wrote:
>
>> Greetings, o lu!
>>
On 27/08/2020 13:48, Michael Wild via Cygwin wrote:
Hmm, OK, changing script.cc to not strip out CYGWIN is trivial. But the
harder part is that main.cc uses ShellExecuteEx() with
SHELLEXECUTEINFO.verb set to "runas" in order to re-run setup elevated.
This resets all environment variables back to
On Sun, 30 Aug 2020, 22:24 Jon Turney wrote:
> On 27/08/2020 06:48, Michael Wild via Cygwin wrote:
> > On Wed, Aug 26, 2020 at 10:57 PM Jon Turney wrote:
> >>
> >> However, even if that's fixed, there's no value for winsymlinks in
> >> CYGWIN env var to specify the behaviour of Cygwin 3.1.4 and pr
On 27/08/2020 06:48, Michael Wild via Cygwin wrote:
On Wed, Aug 26, 2020 at 10:57 PM Jon Turney wrote:
However, even if that's fixed, there's no value for winsymlinks in
CYGWIN env var to specify the behaviour of Cygwin 3.1.4 and previous
(i.e. always create traditional symlinks, don't use WSL
On 27/08/2020 13:49, Michael Wild via Cygwin wrote:
On Thu, Aug 27, 2020 at 2:48 PM Michael Wild wrote:
[...] I attached this fix as a patch. [...]
Thanks. Applied.
--
Problem reports: https://cygwin.com/problems.html
FAQ: https://cygwin.com/faq/
Documentation:
On Thu, Aug 27, 2020 at 2:48 PM Michael Wild wrote:
>
>
> [...] I attached this fix as a patch. [...]
>
>
No, I didn't...
0001-Keep-CYGWIN-environment-variable-when-running-script.patch
Description: Binary data
--
Problem reports: https://cygwin.com/problems.html
FAQ: https
On Thu, Aug 27, 2020 at 11:44 AM Michael Wild wrote:
>
> On Thu, Aug 27, 2020 at 11:02 AM Corinna Vinschen wrote:
>
>> On Aug 27 07:48, Michael Wild via Cygwin wrote:
>> > On Wed, Aug 26, 2020 at 10:57 PM Jon Turney wrote:
>> >
>> > >
>> > > It turns out to be the case that setup doesn't propagate
Greetings, Corinna Vinschen!
> On Aug 27 07:48, Michael Wild via Cygwin wrote:
>> On Wed, Aug 26, 2020 at 10:57 PM Jon Turney wrote:
>>
>> >
>> > It turns out to be the case that setup doesn't propagate the CYGWIN
>> > environment variable into the environment for scripts it runs, so
>> > setting
On Thu, Aug 27, 2020 at 11:02 AM Corinna Vinschen wrote:
> On Aug 27 07:48, Michael Wild via Cygwin wrote:
> > On Wed, Aug 26, 2020 at 10:57 PM Jon Turney wrote:
> >
> > >
> > > It turns out to be the case that setup doesn't propagate the CYGWIN
> > > environment variable into the environment for
On Aug 27 07:48, Michael Wild via Cygwin wrote:
> On Wed, Aug 26, 2020 at 10:57 PM Jon Turney wrote:
>
> >
> > It turns out to be the case that setup doesn't propagate the CYGWIN
> > environment variable into the environment for scripts it runs, so
> > setting that isn't going to make any differen
On Wed, Aug 26, 2020 at 10:57 PM Jon Turney wrote:
>
> It turns out to be the case that setup doesn't propagate the CYGWIN
> environment variable into the environment for scripts it runs, so
> setting that isn't going to make any difference. That should probably
> be considered a bug.
>
> However
On 26/08/2020 19:29, Achim Gratz wrote:
Michael Wild via Cygwin writes:
Is there a way to disable WSL symlinks when installing Cygwin with
setup.exe? Problem is that Docker on Windows apparently doesn't support
them (see https://github.com/moby/moby/issues/41058). I would like to use a
On Wed, Aug 26, 2020 at 9:06 PM Michael Wild wrote:
>
>
> On Wed, Aug 26, 2020 at 8:31 PM Achim Gratz wrote:
>
>> Michael Wild via Cygwin writes:
>> > Is there a way to disable WSL symlinks when installing Cygwin with
>> > setup.exe? Problem is that Docker o
On Wed, Aug 26, 2020 at 8:31 PM Achim Gratz wrote:
> Michael Wild via Cygwin writes:
> > Is there a way to disable WSL symlinks when installing Cygwin with
> > setup.exe? Problem is that Docker on Windows apparently doesn't support
> > them (see https://github.com/moby/m
Michael Wild via Cygwin writes:
> Is there a way to disable WSL symlinks when installing Cygwin with
> setup.exe? Problem is that Docker on Windows apparently doesn't support
> them (see https://github.com/moby/moby/issues/41058). I would like to use a
> custom Docker image for
Hi Andrey
On Wed, Aug 26, 2020 at 5:20 PM Andrey Repin wrote:
> Greetings, Michael Wild!
>
> > Is there a way to disable WSL symlinks when installing Cygwin with
> > setup.exe? Problem is that Docker on Windows apparently doesn't support
> > them (see https://gith
Greetings, Michael Wild!
> Is there a way to disable WSL symlinks when installing Cygwin with
> setup.exe? Problem is that Docker on Windows apparently doesn't support
> them (see https://github.com/moby/moby/issues/41058). I would like to use a
> custom Docker image for
Hi all
Is there a way to disable WSL symlinks when installing Cygwin with
setup.exe? Problem is that Docker on Windows apparently doesn't support
them (see https://github.com/moby/moby/issues/41058). I would like to use a
custom Docker image for GitHub Actions to reproducibly build my pac
How does the acl option work? I ran it on a regular Windows directory (to
my knowledge).
Your english is fine.
On Thu, Apr 16, 2020 at 4:20 AM Andrey Repin wrote:
> Greetings, o lu!
>
> > It worked, but I dont understand on Windows
>
> If you have downloaded it into a directory mounted with "ac
Greetings, o lu!
> It worked, but I dont understand on Windows
If you have downloaded it into a directory mounted with "acl" option, POSIX
behavior apply.
--
With best regards,
Andrey Repin
Thursday, April 16, 2020 11:06:22
Sorry for my terrible english...
--
Problem reports: https://cy
It worked, but I dont understand on Windows
--
Problem reports: https://cygwin.com/problems.html
FAQ: https://cygwin.com/faq/
Documentation:https://cygwin.com/docs.html
Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple
On 2020-04-14 04:43, o lu via Cygwin wrote:
> When downloaded with cygwin wget
> On Tue, Apr 14, 2020 at 3:34 AM o lu wrote:
>> Windows cannot access the specified device, path, or file...
>> with latest setup.exe
Which:
https://cygwin.com/setup-x86_64.exe
or
When downloaded with cygwin wget
On Tue, Apr 14, 2020 at 3:34 AM o lu wrote:
> Windows cannot access the specified device...
>
> Windows cannot access the specified device, path, or file with
> latest setup.exe
>
--
Problem reports: https://cygwin.com/pr
Windows cannot access the specified device...
Windows cannot access the specified device, path, or file with
latest setup.exe
--
Problem reports: https://cygwin.com/problems.html
FAQ: https://cygwin.com/faq/
Documentation:https://cygwin.com/docs.html
well as the
process disappear. Then I start the process (mintty or setup.exe) again
- always successfully.
This morning it was setup.exe with 5 updates. They were still
in the "Pending" Category after restart. But sometimes I'm
working for an hour or so changing my cygwin setup. And in su
Brian,
All-volunteer. I understand that well, and have been using Cygwin for
a long long time.
The volunteers love what they do, and I try to be as respectful as
possible when suggesting changes, changes mean more work for them.
I'm satisfied with this thread.
Thanks Achim, Jon, and to any oth
On 2019-06-11 14:52, Keith Christian wrote:
> On Tue, Jun 11, 2019 at 12:39 PM Brian Inglis wrote:
>> On 2019-06-11 11:19, Achim Gratz wrote:
>>> Keith Christian writes:
Would the maintainers (Achim? Jon?) be willing to consider an option
box log errors to the setup.log file and "Skip no
Thanks for the feedback.
Even if a file were missing that might cause issues in a few
dependency chains, why not allow the install to continue?
Suppose a file was missing halfway through? Why stop the whole
install for the sake of a few missing files? Let the install continue
for those packages
On 2019-06-11 11:19, Achim Gratz wrote:
> Keith Christian writes:
>> Would the maintainers (Achim? Jon?) be willing to consider an option
>> box log errors to the setup.log file and "Skip non-fatal errors and
>> continue?"
>
> You'd first have to teach setup to distinguish between fatal and
> non
Keith Christian writes:
> Would the maintainers (Achim? Jon?) be willing to consider an option
> box log errors to the setup.log file and "Skip non-fatal errors and
> continue?"
You'd first have to teach setup to distinguish between fatal and
non-fatal errors. A missing package archive is always
Greetings, Keith Christian!
> Today I am reinstalling Cygwin to fix a DLL package, taking awhile but
> worth the wait (-: (-:
> Setup paused with a dialog to report a missing .xz file. I saw the
> error a half hour later.
> Would the maintainers (Achim? Jon?) be willing to consider an option
On 2019-06-11 05:27, Keith Christian wrote:
> On Tue, Jun 11, 2019 at 2:03 AM Henning wrote:
>> On 10/06/2019 23:41, Keith Christian wrote:
>>> Would the maintainers (Achim? Jon?) be willing to consider an option box
>>> log errors to the setup.log file and "Skip non-fatal errors and
>>> continue
And if this option is deemed worthy of implementation, add a command
line option for those who skip the GUI.
Thanks again.
On Tue, Jun 11, 2019 at 2:03 AM Henning wrote:
>
> On 10/06/2019 23:41, Keith Christian wrote:
> >
> > Would the maintainers (Achim? Jon?) be willing to consider an option
On 10/06/2019 23:41, Keith Christian wrote:
Would the maintainers (Achim? Jon?) be willing to consider an option
box log errors to the setup.log file and "Skip non-fatal errors and
continue?"
either this, or a prompt asking if the user wants to continue or abort.
Henning
--
Problem reports:
Today I am reinstalling Cygwin to fix a DLL package, taking awhile but
worth the wait (-: (-:
Setup paused with a dialog to report a missing .xz file. I saw the
error a half hour later.
Would the maintainers (Achim? Jon?) be willing to consider an option
box log errors to the setup.log file a
Csaba Raduly, on Sunday, May 19, 2019 04:37 AM, wrote...
>On Sun, May 19, 2019 at 4:57 AM Jack wrote:
>>
>> On 5/18/19 9:24 PM, Jose Isaias Cabrera wrote:
>> > How do I uninstall the installation that I created with the building of
>> > gcc6? I did a search on duckduckgo for,
>> >
>> > cygwin h
On Sun, May 19, 2019 at 4:57 AM Jack wrote:
>
> On 5/18/19 9:24 PM, Jose Isaias Cabrera wrote:
> > How do I uninstall the installation that I created with the building of
> > gcc6? I did a search on duckduckgo for,
> >
> > cygwin how to uninstall gcc after building it
> >
> > and found nothing th
On 5/18/19 9:24 PM, Jose Isaias Cabrera wrote:
How do I uninstall the installation that I created with the building of gcc6? I
did a search on duckduckgo for,
cygwin how to uninstall gcc after building it
and found nothing that could help me. Right now I have two installs of gcc:
v7.4.and v6
From: cygwin-ow...@cygwin.com on behalf of Jose
Isaias Cabrera
Sent: Saturday, May 18, 2019 07:15 PM
To: Ken Brown; cygwin@cygwin.com
Subject: Re: How to install gcc and g++ 6 on cygwin which are not on the
setup.exe
Ken Brown, on Saturday, May 18, 2019 11:54 AM, wrote...
>On 5/18/2019 8:19
Ken Brown, on Saturday, May 18, 2019 11:54 AM, wrote...
>On 5/18/2019 8:19 AM, Jose Isaias Cabrera wrote:
> > I am finished and now to start building Bedrockdb. Thanks.
>
> By the way, you're not the only person building Bedrockdb on Cygwin. Someone
> has posted about 10 fixes in the last few days
On Sat, May 18, 2019 at 5:55 PM Ken Brown wrote:
>
> On 5/18/2019 8:19 AM, Jose Isaias Cabrera wrote:
> > I am finished and now to start building Bedrockdb. Thanks.
>
> By the way, you're not the only person building Bedrockdb on Cygwin. Someone
> has posted about 10 fixes in the last few days:
>
On 5/18/2019 8:19 AM, Jose Isaias Cabrera wrote:
> I am finished and now to start building Bedrockdb. Thanks.
By the way, you're not the only person building Bedrockdb on Cygwin. Someone
has posted about 10 fixes in the last few days:
https://github.com/Expensify/Bedrock/issues
It looks lik
Csaba Raduly, on Saturday, May 18, 2019 02:50 AM, wrote...
>On Sat, May 18, 2019 at 7:14 AM Brian Inglis wrote:
>>
>> On 2019-05-17 21:18, Jose Isaias Cabrera wrote:
>> > After more than 8 hours running, building gcc-6.4.0, this error popped up:
>> > In file included from ../.././libjava/jni-lib
Brian Inglis, on Saturday, May 18, 2019 01:14 AM, wrote...
On 2019-05-17 21:18, Jose Isaias Cabrera wrote:
> After more than 8 hours running, building gcc-6.4.0, this error popped up:
> In file included from ../.././libjava/jni-libjvm.cc:14:0:
> ../.././libjava/include/jvm.h:795:3: error: ‘ParkHe
Doug Henderson, Saturday, May 18, 2019 01:12 AM, wrote...
>On Wed, 15 May 2019 at 14:58, Jose Isaias Cabrera <> wrote:
>You seem to be having some difficulty getting an older version of the
>compiler running. Perhaps it might be useful to go back to the
>beginning and see if there is an alternat
Jose
Isaias Cabrera
Sent: Friday, May 17, 2019 11:18 PM
To: cygwin@cygwin.com; m...@cs.umass.edu
Subject: Re: How to install gcc and g++ 6 on cygwin which are not on the
setup.exe
After more than 8 hours running, building gcc-6.4.0, this error popped up:
In file included from ../.././libjav
On Sat, May 18, 2019 at 7:14 AM Brian Inglis wrote:
>
> On 2019-05-17 21:18, Jose Isaias Cabrera wrote:
> > After more than 8 hours running, building gcc-6.4.0, this error popped up:
> > In file included from ../.././libjava/jni-libjvm.cc:14:0:
> > ../.././libjava/include/jvm.h:795:3: error: ‘Park
On 2019-05-17 21:18, Jose Isaias Cabrera wrote:
> After more than 8 hours running, building gcc-6.4.0, this error popped up:
> In file included from ../.././libjava/jni-libjvm.cc:14:0:
> ../.././libjava/include/jvm.h:795:3: error: ‘ParkHelper’ does not name a type
> ParkHelper park_helper;
> Did a
On Wed, 15 May 2019 at 14:58, Jose Isaias Cabrera <> wrote:
> Is there a way an easy way to install gcc-6 and g++-6 on cygwin? I just
> uninstalled v7.4.x or whatever was on the setup. I am trying to build a
> software and gcc 7.x and g++ 7.x is giving too many compiler errors. I want
> to t
After more than 8 hours running, building gcc-6.4.0, this error popped up:
In file included from ../.././libjava/jni-libjvm.cc:14:0:
../.././libjava/include/jvm.h:795:3: error: ‘ParkHelper’ does not name a type
ParkHelper park_helper;
Did a few duckduckgo searches and nothing helpfult was fo
Eliot Moss, on Friday, May 17, 2019 09:16 AM, wrote...
[clip]
>I've been a Cygwin user for a long time, and I like it, but
>another possibility here for you is WSL (Windows Subsystem
>for Linux). It's a pretty easy install, and because it is
>done by Microsoft and can reliably use internal inter
On 5/16/2019 11:28 PM, Jose Isaias Cabrera wrote:
Csaba Ráduly, on Thursday, May 16, 2019 05:47 PM, wrote...
BTW, if you're trying to build Bedrockdb, G++ 6 is likely unable to help you.
The Bedrockdb developers seem to suffer a bit from "all the world is Linux"
syndrome.
Yeah. Seems like t
Csaba Ráduly, on Thursday, May 16, 2019 05:47 PM, wrote...
>Hi José,
Hi Csaba.
>Building GMP, MPFR and MPC seems like overkill. The following packages are
>available for Cygwin:
>
>libgmp-devel 6.1.2
>libmpfr-devel 4.0.2
>libmpc-devel 1.1.0
Yep, tried these, and for some reason, when I ran ./conf
Hi José,
On 16/05/2019 18:47, Jose Isaias Cabrera wrote:
Csaba Raduly, on Thursday, May 16, 2019 03:36 AM, wrote...
>
>Hi José,
>Another option is to download the source and build it yourself.
Yep. Going with this option. Seems the most logical one for now. After
running ./configure, g
Csaba Raduly, on Thursday, May 16, 2019 03:36 AM, wrote...
>
>Hi José,
>Another option is to download the source and build it yourself.
Yep. Going with this option. Seems the most logical one for now. After
running ./configure, got this error,
configure: error: Building GCC requires GMP 4.
Hi Jose,
On Wed, May 15, 2019 at 10:58 PM Jose Isaias Cabrera wrote:
>
>
> Greetings.
>
> Is there a way an easy way to install gcc-6 and g++-6 on cygwin? I just
> uninstalled v7.4.x or whatever was on the setup. I am trying to build a
> software and gcc 7.x and g++ 7.x is giving too many com
Greetings.
Is there a way an easy way to install gcc-6 and g++-6 on cygwin? I just
uninstalled v7.4.x or whatever was on the setup. I am trying to build a
software and gcc 7.x and g++ 7.x is giving too many compiler errors. I want to
try 6 to see if these errors minimize or go away. Thank
ple, but the announcements for the updates of setup_xx.exe do
> > not include the checksums.
>
> The root of trust for setup.exe and the whole of the Cygwin installation
> is the GPG key for cygwin@cygwin.com and the integrity of the
> sourceware.org server hosting the original files,
n the use of multiple sources, using cygwin as
an example, but the announcements for the updates of setup_xx.exe do
not include the checksums.
The root of trust for setup.exe and the whole of the Cygwin installation
is the GPG key for cygwin@cygwin.com and the integrity of the
sourceware.org s
When bootstrapping a chain of trust, having multiple sources for the
checksum values is significantly better than starting blind.
I'm writing a blogpost on the use of multiple sources, using cygwin as
an example, but the announcements for the updates of setup_xx.exe do
not include the checksums. A
On Apr 16 09:19, Houder wrote:
> L.S.,
>
> Setup.exe writes "user defaults" to /etc/setup/setup.rc in the root
> directory. Among these user defaults (which should override program
> defaults) are "last-action" and "last-cache".
>
> las
L.S.,
Setup.exe writes "user defaults" to /etc/setup/setup.rc in the root
directory. Among these user defaults (which should override program
defaults) are "last-action" and "last-cache".
last-cache is an alias for the Local Package Directory (abbreviated
to l
L.S.,
While implementing a solution for the problem described here:
https://cygwin.com/ml/cygwin/2019-04/msg00032.html
( Setup: why consult registry (rootdir) if -R has been specified? )
I discovered a bug in main.cc (setup.exe).
At startup, setup.exe writes the following report to
On Fri, Mar 15, 2019 at 8:25 AM Brian Inglis wrote:
> ... corporate policies, proxies, firewalls, security products.
> Systems or images older than a year may need the new root CA installed - some
> enterprises are very selective about including support for anything in their
> images - and users ma
TTPS
> client, for the one-time operation of downloading setup.exe. What are
> they using, a TRS-80?
I never said it was a person nor that they did not have access to a TLS client.
I said they could not use a TLS client, which could be because of platform
deficiencies, corporate policies, proxi
Greetings, Lee!
> On 3/12/19, Andrey Repin wrote:
>> Greetings, Lee!
>>
It gives you false sense of security. What is worse, everybody is
attempting
to reassure this false sense on every possible occasion.
>>
>>> I don't think it's a false sense of security. https:// isn't "safe"
>
world. But at least in my experience, most windows
>> software doesn't come with a pgp signature & using a separate channel
>> to get the pgp key isn't so easy.
>
> In my experience, this is a Cygwin mailing list and we're discussing issues
> of obtainin
On 3/12/19, Andrey Repin wrote:
> Greetings, Lee!
>
>>> It gives you false sense of security. What is worse, everybody is
>>> attempting
>>> to reassure this false sense on every possible occasion.
>
>> I don't think it's a false sense of security. https:// isn't "safe"
>> but it is _safer_ than h
re doesn't come with a pgp signature & using a separate channel
> to get the pgp key isn't so easy.
In my experience, this is a Cygwin mailing list and we're discussing issues
of obtaining and verifying the authenticity of setup.exe.
P.S.
In regard to Cygwin mailing list, ple
Greetings, Lee!
>> It gives you false sense of security. What is worse, everybody is
>> attempting
>> to reassure this false sense on every possible occasion.
> I don't think it's a false sense of security. https:// isn't "safe"
> but it is _safer_ than http://
Yep. Now, let's recall mcafee, no
On 3/12/19, Achim Gratz wrote:
> Lee writes:
>> I don't think it's a false sense of security. https:// isn't "safe"
>> but it is _safer_ than http://
>
> Unless you are in an environment where an extra root cert is injected
> just to be able to break up the encrypted connection. Which is a lot
>
On 3/12/19, Andrey Repin wrote:
> Greetings, Lee!
>
>>> Which is way worse in my opinion, than any theoretical MITM attack,
>>> which
>>> is easily mitigated with proper validation of your downloads.
>
>> Serious question - exactly how does one do "proper validation of your
>> downloads"?
>
> Use
Lee writes:
> I don't think it's a false sense of security. https:// isn't "safe"
> but it is _safer_ than http://
Unless you are in an environment where an extra root cert is injected
just to be able to break up the encrypted connection. Which is a lot
more common than people think and is not q
Greetings, Lee!
>> Which is way worse in my opinion, than any theoretical MITM attack, which
>> is easily mitigated with proper validation of your downloads.
> Serious question - exactly how does one do "proper validation of your
> downloads"?
Use PGP signature to validate the installer. Use sep
unreliable (understatement).
>
>> > This is my opinion only of course, but if cygwin wants to have any
>> > security credibility, it should simply disallow non-SSL downloads of
>> > setup.exe. Otherwise the chain of authenticity is broken forever.
>>
>> They sign setu
of course, but if cygwin wants to have any
>> security credibility, it should simply disallow non-SSL downloads of
>> setup.exe. Otherwise the chain of authenticity is broken forever.
>
> All the SSL stuff is build on idea of implicit unlimited trust.
I agree, the whole certificate autho
Archie Cobbs writes:
> Downloading the sig file over HTTP is useless... any attacker going to
> the trouble to launch a MITM attack for setup.exe will certainly also
> do it for the sig file as well.
No, the signature would be rejected if you cared to actually check the
key and signatu
> a
> performance and support burden compared to allowing both HTTP:80 and
> HTTPS:443.
OK. Personally I have trouble believing any such person exists. That
is, a person who has access to an HTTP client, but not an HTTPS
client, for the one-time operation of downloading setup.exe. What are
atement).
>>> This is my opinion only of course, but if cygwin wants to have any
>>> security credibility, it should simply disallow non-SSL downloads of
>>> setup.exe. Otherwise the chain of authenticity is broken forever.
>> They sign setup.exe, so "the ch
gwin wants to have any
> > security credibility, it should simply disallow non-SSL downloads of
> > setup.exe. Otherwise the chain of authenticity is broken forever.
>
> They sign setup.exe, so "the chain of authenticity" is there regardless.
> https://cygwin.com/se
TPS.
> How could that reduce security?
> (sigh)
> I must say I'm surprised so many people think it's a good idea to
> leave cygwin open to trivial MITM attacks, which is the current state
> of affairs.
> This is my opinion only of course, but if cygwin wants to have a
d so many people think it's a good idea to
> leave cygwin open to trivial MITM attacks, which is the current state
> of affairs.
But it's only open to a trivial MITM attack if the user types in
"http://cygwin.com"; - correct? Why isn't the fix "don't do
any people think it's a good idea to
leave cygwin open to trivial MITM attacks, which is the current state
of affairs.
This is my opinion only of course, but if cygwin wants to have any
security credibility, it should simply disallow non-SSL downloads of
setup.exe. Otherwise the chain of authen
1 - 100 of 2876 matches
Mail list logo