[Rd] R 3.0.1: wrong MD5 checksums for Windows?
murdoch.duncan at gmail.com
Sun May 19 14:00:10 CEST 2013
On 13-05-18 5:37 PM, Duncan Murdoch wrote:
> On 13-05-17 2:01 PM, Tal Galili wrote:
>> Hello dear R-devel,
>> I am not sure if this issue is tracked or not, but in case it isn't:
>> It appears that R 3.0.1 reproduces the error reported for R 3.0.0 here:
>> That is, that when installing R 3.0.1 on Windows 7, and then running:
>> It produces the error:
>> files â€˜etc/Rconsoleâ€™, â€˜etc/Rprofile.siteâ€™ have the wrong MD5 checksums
>>  FALSE
> Technically speaking, that's just a message, not an error. Those files
> were changed by the installer, so the information is correct.
> From a user point of view, it does look like an error. We could avoid
> the message in several ways: don't bother checking those files, or
> compute the MD5 checksums on default installed versions of those files,
> or recompute the checksums after installation.
> I think the third choice is too hard, so it's not something I'd do.
> I don't know which of the other two is better. A malicious attacker
> could do a lot of damage by messing with the Rprofile.site file; maybe a
> user would want to know if that had happened. So that suggests the
> second choice. But then users who don't choose whatever default the
> installer picks will always get the message.
I think the problem of a malicious attacker is pretty far-fetched, but
an accidental change might be worth noting, so I've put the second
choice in place in R-devel and R-patched.
More information about the R-devel