Discussion:
Found broken file at the ftp download archive
(too old to reply)
5***@mail.com
2011-03-20 07:26:34 UTC
Permalink
Hello!

I'm searching for something much better to write with,
and LyX is looking rather interesting (even despite the
faint taste of Rube Goldberg). So I'm collecting the
parts to try it on Windows, Linux, Mac OS X, and
OS/2 (I use them all, delight to find all being covered!).
In the process I found one small file will not download.

This is the directory that is involved:

ftp://ftp.lyx.org/pub/lyx/bin/1.6.9/

Inside of this directory there are four small files that
have the file extension "sig" and three of them have
downloaded just fine. The forth one failed many tries.
I also found a Mirror directory on another site that
has that directory mirrored...but -not- the one file
that I can't download. Here is the Weblink\URL
to the file that I'm told "the source file cannot be read":

ftp://ftp.lyx.org/pub/lyx/bin/1.6.9/lyx-1.6.9-cygwin.tar.gz.sig


It would make better sense if the one file was
missing from the Mirror? Yes...but -all- of the
files with a "sig" file extension are not to be seen
at the Mirror site. Here is the WebLink/URL
for the Mirror site:

http://lyx.cybermirror.org/1.6.9/


I have no idea what files with the "sig" file extension
are for (anyone wish to tell me?).

By-The-Way, since there is a file inside of the
directory that will not download there will be a
occasional visitor that will have their attempt at
a simple download fail to complete, and some
few users will stop dead at a download that
stops dead. So this small fuss will mess up
the world for a few visitors that try to download.
Would be nice to "fix" things in the proper way.
Build a small amount more grace into the world.

Thank You for your attention to this matter.
Also a "Thank You" for producing something that
might make my life more productive and delightful.


If You are looking for ideas...I think that this would
be simpler and less chancy for everyone if all of the
components were bound up inside of one single file.
If you have no idea how that can be done You could
look into the production of the VLC Media Player

http://www.videolan.org

It is Open Source, has single binary files for several
platforms (they claim 19 now, including my Windows,
Mac OS X, Linux, and OS/2). It is popular, easy, and
even powerful in a few ways. Also free, and able to do
a few similar Rube Goldberg routines without displaying
even a single two-part construction. The software plays
most multimedia files that I ever run into with nearly
perfect aplomb. I suspect that Lyx could do rather
similar...and become a simple and safe tool for just
about any human. So...I hope that someone somewhere
is moving in this direction with a version of LyX
(and with every feature in the world getting added).

Sorry...I make BIG wishes! Does look like You people
maybe sometimes fulfill Big Wishes...perhaps I might
write to You more often? (grin) Thank You for Your efforts!



Have Fun!


B Wilson
Jürgen Spitzmüller
2011-03-20 09:50:11 UTC
Permalink
Post by 5***@mail.com
Inside of this directory there are four small files that
have the file extension "sig" and three of them have
downloaded just fine. The forth one failed many tries.
I also found a Mirror directory on another site that
has that directory mirrored...but -not- the one file
that I can't download. Here is the Weblink\URL
ftp://ftp.lyx.org/pub/lyx/bin/1.6.9/lyx-1.6.9-cygwin.tar.gz.sig
Strange, it works for me and it seems to have proper rights.
Post by 5***@mail.com
It would make better sense if the one file was
missing from the Mirror? Yes...but -all- of the
files with a "sig" file extension are not to be seen
at the Mirror site. Here is the WebLink/URL
http://lyx.cybermirror.org/1.6.9/
I have no idea what files with the "sig" file extension
are for (anyone wish to tell me?).
These are GPG signatures. You only need them if you want to verify that the
binaries are really provided by "us" (the LyX developers).

See the explanations here:
http://www.lyx.org/Download#toc11

Jürgen
Pavel Sanda
2011-03-20 09:50:54 UTC
Permalink
Post by 5***@mail.com
that I can't download. Here is the Weblink\URL
ftp://ftp.lyx.org/pub/lyx/bin/1.6.9/lyx-1.6.9-cygwin.tar.gz.sig
the file had wrong permission (not readable for others).
fixed now.
Post by 5***@mail.com
I have no idea what files with the "sig" file extension
are for (anyone wish to tell me?).
they are the pgp signatures of our binaries and tarballs (see download section
of web pages). in short if some attacker gain root access on the ftp site
he can change the binaries or tarballs with some injected virues/etc. this
already happened for other projects and signatures are way how to defend for this
kind of attack.

you are able to to use lyx without these sig files. they are only for the
people who want to be on the safe side.
Post by 5***@mail.com
If You are looking for ideas...I think that this would
be simpler and less chancy for everyone if all of the
components were bound up inside of one single file.
If you have no idea how that can be done You could
look into the production of the VLC Media Player
they are all one single file. just for different platforms.
if vlc media player does not provide any signatures one
day he may regret... ;)

pavel
Jürgen Spitzmüller
2011-03-20 09:54:23 UTC
Permalink
Post by Pavel Sanda
Post by 5***@mail.com
that I can't download. Here is the Weblink\URL
ftp://ftp.lyx.org/pub/lyx/bin/1.6.9/lyx-1.6.9-cygwin.tar.gz.sig
the file had wrong permission (not readable for others).
fixed now.
So you fixed it in the meantime? Thanks. I thought I had checked all rights
this time. I even have a thick check mark on my release prep list %-/

Jürgen

Loading...