Re: Build and Release Hygiene

2012-07-17 Thread Jürgen Schmidt
On 7/17/12 5:43 AM, Fernando Cassia wrote: On Mon, Jul 16, 2012 at 12:04 PM, Rob Weir robw...@apache.org wrote: or verifying the MD5 hashes. SHA1 :) In 2004, more serious flaws were discovered in MD5, making further use of the algorithm for security purposes

Build and Release Hygiene

2012-07-16 Thread Rob Weir
We receive several reports a week of someone claiming that their OpenOffice is infected by a virus or trojan. We take such reports seriously, and I've investigated several myself, with steps such as: 1) create clean VM of Windows XP 2) install all XP patches 3) install security software that

Re: Build and Release Hygiene

2012-07-16 Thread Ji Yan
IMHO, firstly, we should keep build machine as clean as possible, then install RC build to a clean testing machine and scan virus by security tool to make sure our package do not carry any virus. But which security tool should we use? Norton? Kaspersky? or any other tool? 2012/7/16 Rob Weir

Re: Build and Release Hygiene

2012-07-16 Thread Fernando Cassia
On Mon, Jul 16, 2012 at 12:04 PM, Rob Weir robw...@apache.org wrote: or verifying the MD5 hashes. SHA1 :) In 2004, more serious flaws were discovered in MD5, making further use of the algorithm for security purposes questionable—specifically, a group of researchers described how to create