Tech Insider					     Technology and Trends


			      USENET Archives

Path: gmd.de!xlink.net!howland.reston.ans.net!noc.near.net!uunet!
news2.uunet.ca!ionews!werewolf
From: were...@io.org (Mark Terka)
Newsgroups: alt.security.pgp
Subject: PGP 2.3a????
Date: 19 Jul 1993 04:49:06 GMT
Organization: Internex Online - Toronto, Canada (416) 363-3783
Lines: 4
Message-ID: <22d942$p3@ionews.io.org>
NNTP-Posting-Host: io.org

Someone told me that there has been a recent rlease of PGP...a version
called 2.3a that allegedly fixes some bugs.

Anyone else know anything about this?

Newsgroups: alt.security.pgp
Path: gmd.de!newsserver.jvnc.net!howland.reston.ans.net!noc.near.net!
uunet!mnemosyne.cs.du.edu!nyx!astrashe
From: astr...@nyx.cs.du.edu (Alex Strasheim)
Subject: Re: PGP 2.3a????
Message-ID: <1993Jul19.142049.18095@mnemosyne.cs.du.edu>
X-Disclaimer: Nyx is a public access Unix system run by the University
	of Denver for the Denver community.  The University has neither
	control over nor responsibility for the opinions of users.
Sender: use...@mnemosyne.cs.du.edu (netnews admin account)
Organization: Nyx, Public Access Unix at U. of Denver Math/CS dept.
References: <22d942$p3@ionews.io.org>
Date: Mon, 19 Jul 93 14:20:49 GMT
Lines: 51

In article <22d942$p...@ionews.io.org> were...@io.org (Mark Terka) writes:

>Someone told me that there has been a recent rlease of PGP...a version
>called 2.3a that allegedly fixes some bugs.

>Anyone else know anything about this?

PGP 2.3a is in the British ftp archive which is mentioned in the docs; 
I'm sorry, but I can't remember its name right now.

But I did grab it last night, and I a couple of comments about the source
code version.

First of all, the makefile still doesn't work for bcc.  The bug is trivial
to fix, so it's not a big deal.  The problem involves the section of the
makefile which creates the file containing the list of object files to be
linked into pgp;  one of the lines is too long, and it produces an error.

I don't know if the pgp developers read this group, or if they are open to
suggestions about how they go about distributing their program.  But I
think that the experience of release 2.3 suggests that they ought to
release official versions of the program more slowly, and that those
offical releases ought to be preceeded by *public* beta copies.

That way things like the bug in the makefile and the more serious clearsig
program could be resolved before an official release is made.

My other comment concerns the relationship between the 2.3a source code
and the executables.  I haven't looked into this in any detail, so I might
just be doing something stupid.  But I compiled 2.3a with bcc 3.1, using
the supplied makefile (with minor changes to solve the problem described
above) and using borland's prjcfg.exe routine to translate the .prj file
into a .cfg file suitable for use by the command-line compiler.  The
result of this was an exe file which was *much* larger -- more than 350k
-- than the one supplied in pgp23A.zip.  On top of that, pklite reported
that pgp.exe (the one I compiled) might contain overlays;  no such warning
was generated when I used the same program to compress the distributed
pgp.exe. 

I have been useing the same techniques to compile 2.2 and 2.3, and I've
always ended up with files that are almost identical to the distribution
exes.

As I said, I haven't gotten the chance to look through the code yet;  I
downloaded the files last night and was only able to do a cursory
inspection.

Has anyone else tried to recreate the exe's?

--
Alex Strasheim | astr...@nyx.cs.du.edu | pgp public key available via finger

Newsgroups: alt.security.pgp
Path: gmd.de!newsserver.jvnc.net!howland.reston.ans.net!darwin.sura.net!
haven.umd.edu!uunet!math.fu-berlin.de!ifmsun8.ifm.uni-hamburg.de!
rzsun2.informatik.uni-hamburg.de!bontchev
From: bont...@news.informatik.uni-hamburg.de (Vesselin Bontchev)
Subject: Re: PGP 2.3a????
Message-ID: <CAF73v.KGs@informatik.uni-hamburg.de>
Sender: ne...@informatik.uni-hamburg.de (Mr. News)
Organization: University of Hamburg, Germany
X-Newsreader: TIN [version 1.1 PL9]
References: <1993Jul19.142049.18095@mnemosyne.cs.du.edu>
Date: Mon, 19 Jul 1993 16:28:42 GMT
Lines: 30

Alex Strasheim (astr...@nyx.cs.du.edu) writes:

> PGP 2.3a is in the British ftp archive which is mentioned in the docs; 
> I'm sorry, but I can't remember its name right now.

The "British archive mentioned in the docs" is src.doc.ic.ac.uk.
However, the docs seem to be a bit out-of-date, because the directory
listed there (/computing/security/software/PGP/) doesn't seem to
exist. Instead, one should look in /computing/security/pgp/. The files
are named pgp23A.zip, pgp23srcA.zip, and pgp23sigA.zip - so beware if
you are subject to the 8.3 file name limitation.

> I don't know if the pgp developers read this group, or if they are open to
> suggestions about how they go about distributing their program.  But I
> think that the experience of release 2.3 suggests that they ought to
> release official versions of the program more slowly, and that those
> offical releases ought to be preceeded by *public* beta copies.

Exactly. Also, as soon as a bug is discovered, acknowledged, and a fix
for it is known, a patch should be made available -immediately- (so we
won't have to wait for the next version) and it should be signed by
one of the developpers.

Regards,
Vesselin
--
Vesselin Vladimirov Bontchev          Virus Test Center, University of Hamburg
Tel.:+49-40-54715-224, Fax: +49-40-54715-226      Fachbereich Informatik - AGN
< PGP 2.3 public key available on request. > Vogt-Koelln-Strasse 30, rm. 107 C
e-mail: bont...@fbihh.informatik.uni-hamburg.de        22527 Hamburg, Germany

			        About USENET

USENET (Users’ Network) was a bulletin board shared among many computer
systems around the world. USENET was a logical network, sitting on top
of several physical networks, among them UUCP, BLICN, BERKNET, X.25, and
the ARPANET. Sites on USENET included many universities, private companies
and research organizations. See USENET Archives.

		       SCO Files Lawsuit Against IBM

March 7, 2003 - The SCO Group filed legal action against IBM in the State 
Court of Utah for trade secrets misappropriation, tortious interference, 
unfair competition and breach of contract. The complaint alleges that IBM 
made concentrated efforts to improperly destroy the economic value of 
UNIX, particularly UNIX on Intel, to benefit IBM's Linux services 
business. See SCO vs IBM.

The materials and information included in this website may only be used
for purposes such as criticism, review, private study, scholarship, or
research.

Electronic mail:			       WorldWideWeb:
   tech-insider@outlook.com			  http://tech-insider.org/