3

I bought turbotax software from amazon (downloaded mac version). Therefore, I know it is safe to use. However, if one wants to verify the software has not been tampered with how do we do that ?. Mac gives standard warning "Do you want to open software downloaded from internet"

  • If the hashes are not public (either by the company or a third party that you trust), then there is no way to tell (without testing/going through code yourself). You hope that when you purchase it from a legitimate source you will get legitimate software. In most cases, that will be true. – JBis Jul 11 at 5:09
0

Some download websites show the file hash of the installer on the website ... so then you are supposed to download the file , calculate the downloaded file hash , and compare to see if the hashes match to confirm the download wasn't tampered with.

Similarly if you have a known legit version of the software and a questionable copy of the same version of software you can get the file hash of each of the files and compare to ensure it they are the same and haven't been tampered with.

Note this only works if the 2 pieces of software are the same exact version because file hashed will change version to version.

Here is samples of how to get file hashed on a Mac

https://www.dyclassroom.com/howto-mac/how-to-verify-checksum-on-a-mac-md5-sha1-sha256-etc

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.