Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

package repository on babyname.tips?

18 views
Skip to first unread message

Michael Kallweitt

unread,
Dec 12, 2017, 8:27:04 AM12/12/17
to
A few minutes ago, I updated my TexLive distro using "sudo tlmgr update
-self -all", when I noticed that something came in through a repository
(verified, though) that looks a little suspicious, "babyname.tips".

Can anyone confirm that this is a legitimate repo?

,----
| tlmgr: package repository http://ftp.uni-erlangen.de/ctan/systems/texlive/tlnet (verified)
| tlmgr: saving backups to /usr/local/texlive/2017/tlpkg/backups
| [1/1, ??:??/??:??] update: texlive.infra [372k] (45888 -> 46048) ... done
| Restarting tlmgr to complete update ...
| tlmgr: package repository http://babyname.tips/mirrors/ctan/systems/texlive/tlnet (verified)
| tlmgr: saving backups to /usr/local/texlive/2017/tlpkg/backups
| [1/1, ??:??/??:??] update: texlive-scripts [118k] (45974 -> 46030) ... done
| running mktexlsr ...
| done running mktexlsr.
| running mtxrun --generate ...
| done running mtxrun --generate.
| tlmgr: package log updated: /usr/local/texlive/2017/texmf-var/web2c/tlmgr.log
`----


--
www.wasfuereintheater.com - Neue Theaterprojekte im Ruhrpott
»DAS UNBEKANNTE SCHÖN ZU FINDEN. DEM UNVERSTANDENEN MIT WÄRME ZU
BEGEGNEN. DAS IST WAHRE LIEBE« Barbara Bollwahn, http://ow.ly/Xk52L

Denis Bitouzé

unread,
Dec 12, 2017, 1:27:38 PM12/12/17
to
Le 12/12/17 à 13h26, Michael Kallweitt a écrit :

> A few minutes ago, I updated my TexLive distro using "sudo tlmgr update
> -self -all", when I noticed that something came in through a repository
> (verified, though) that looks a little suspicious, "babyname.tips".
>
> Can anyone confirm that this is a legitimate repo?

I can't answer this question but I always specify the repository (in
order to avoid some slow ones around):

┌────
│ tlmgr update --self --all --repository=http://ctan.mines-albi.fr/systems/texlive/tlnet
└────

and, as a side effect, I always use a safe (well, at least a known) one.
--
Denis

jfbu

unread,
Dec 12, 2017, 1:30:07 PM12/12/17
to
Le 12/12/2017 à 14:26, Michael Kallweitt a écrit :
> A few minutes ago, I updated my TexLive distro using "sudo tlmgr update
> -self -all", when I noticed that something came in through a repository
> (verified, though) that looks a little suspicious, "babyname.tips".
>
> Can anyone confirm that this is a legitimate repo?
>
> ,----
> | tlmgr: package repository http://ftp.uni-erlangen.de/ctan/systems/texlive/tlnet (verified)
> | tlmgr: saving backups to /usr/local/texlive/2017/tlpkg/backups
> | [1/1, ??:??/??:??] update: texlive.infra [372k] (45888 -> 46048) ... done
> | Restarting tlmgr to complete update ...
> | tlmgr: package repository http://babyname.tips/mirrors/ctan/systems/texlive/tlnet (verified)
> | tlmgr: saving backups to /usr/local/texlive/2017/tlpkg/backups
> | [1/1, ??:??/??:??] update: texlive-scripts [118k] (45974 -> 46030) ... done
> | running mktexlsr ...
> | done running mktexlsr.
> | running mtxrun --generate ...
> | done running mtxrun --generate.
> | tlmgr: package log updated: /usr/local/texlive/2017/texmf-var/web2c/tlmgr.log
> `----
>
>

Hi,

it is listed officially there: https://ctan.org/mirrors

you appear to be safe ;-)

... except if that web site was hacked as well and cryptographic
verification was victim of an exploit ...

Jean-François

Peter Flynn

unread,
Dec 12, 2017, 5:03:52 PM12/12/17
to
The site itself appears to be genuine, except that the owner is hiding
behind an anonymous domain registrar, and appears to be offering a
fairly worthless database of baby names (read their home page).

Why they have repos for 17 systems, including Mint, Exim, and GNU, is
anyone's guess. I suspect it is a vanity site rather than a danger.

///Peter
0 new messages