I noticed that certain software does not provide hash anymore nowadays.
E.g.
- Zoom
wolf@linux:~$ ls -lh zoom_amd64.deb
-rw-rw-r-- 1 wolf wolf 44M Jan 1 00:00 zoom_amd64.deb
wolf@linux:~$
I've googled both md5 and sha256 hashes but couldn't find it.
wolf@linux:~$ md5sum zoom_amd64.deb
5f452b11d86d41e108a32f6a7d86c6dc zoom_amd64.deb
wolf@linux:~$
wolf@linux:~$ sha256sum zoom_amd64.deb
b06bc30a53ac5d3feb624e536c86394ccb9ac5fc8da9bd239ef48724138e9fc1 zoom_amd64.deb
wolf@linux:~$
- Vivaldi Browser
wolf@linux:~$ ls -lh vivaldi-stable_3.5.2115.81-1_amd64.deb
-rw-rw-r-- 1 wolf wolf 74M Jan 2 11:08 vivaldi-stable_3.5.2115.81-1_amd64.deb
wolf@linux:~$
wolf@linux:~$ md5sum vivaldi-stable_3.5.2115.81-1_amd64.deb
f6dce2ca099e9e910ca6dc1c361aa5b5 vivaldi-stable_3.5.2115.81-1_amd64.deb
wolf@linux:~$
wolf@linux:~$ sha256sum vivaldi-stable_3.5.2115.81-1_amd64.deb
38a18fe2624994cbc9782d7805ec058774e54e99e0ade6ad5e85da45055c9e5c vivaldi-stable_3.5.2115.81-1_amd64.deb
wolf@linux:~$
- Microsoft Teams
https://www.microsoft.com/en-my/microsoft-teams/download-app#desktopAppDownloadregion
wolf@linux:~$ ls -lh teams_1.3.00.30857_amd64.deb
-rw-rw-r-- 1 wolf wolf 73M Jan 20 09:07 teams_1.3.00.30857_amd64.deb
wolf@linux:~$
wolf@linux:~$ md5sum teams_1.3.00.30857_amd64.deb
3d738e013804b96f401bd274db4069d1 teams_1.3.00.30857_amd64.deb
wolf@linux:~$
wolf@linux:~$ sha256sum teams_1.3.00.30857_amd64.deb
5058b1fe8bf9fffc57d94148a7ec55119c5cd9b21aa267cb13518bec0244241b teams_1.3.00.30857_amd64.deb
wolf@linux:~$
How do we verify software like this to make sure nobody has ever tampered with it?