[MPlayer-dev-eng] homepage ideas

[Bernd Ernesti]

On Mon, Sep 16, 2002 at 11:42:26PM +0200, Arpi wrote:
[..]
> actually the skin tarballs are generated by a script from CVS
> teh script rebulilds each tarball wheter it changed or not since prev build.

Ah, I see.

> if you want updates, just cvs checkout the 'skins' module...
> it's faster than downloading ...

The updates is not the real problem here, the problem is that the files have
no version number so you can't check them, which is not a real problem because
they can't have a backdoor like some other source archives (irssi, ssh, ...) had
in the past months.
These trojans wouldn't be installed, because the SHA1 checksum didn't match and
so the user was save when he tried to build them, at least on the *BSD package
systems.

Bernd