Linked Questions

7 votes
3 answers

Why is it necessary to match the checksum of a download with another file provided by the same server? [duplicate]

Possible Duplicate: Does hashing a file from an unsigned website give a false sense of security? On many servers providing files for download, there is a file on which checksums are provided for ...
Benoit's user avatar
  • 493
10 votes
4 answers

What's the point of providing file checksums for verifying downloads? [duplicate]

Many projects offering binaries, also offer hashes (e.g. SHA256) of those binaries, wither as .ASC files, or directly on the web page near the binary. This isn't to protect against network-caused ...
Dan Dascalescu's user avatar
4 votes
3 answers

Why verify a file / firmware downloaded online against a checksum? [duplicate]

When ever there is a file / firmware to download online and they provide a checksum to check the file against, i always confirm the check sum of the downloaded file matches the checksum posted online. ...
sam's user avatar
  • 546
3 votes
1 answer

Is there any purpose for providing checksums on a non-HTTPS location? [duplicate]

When you download a file, sometimes the website owner puts an MD5, SHA1, SHA256 or similar hash/checksum of the file right next to it; either on the page where you can download it, or as a separate ...
Qqwy's user avatar
  • 131
1 vote
1 answer

Why do some websites have their hashes on the same area as the download link? [duplicate]

Some sites allow us to use hashes to make sure that the file we download is what it should be and that it is not tampered with. Some sites may have their hashes on a different domain probably on a ...
Henry WH Hack v3.0's user avatar
1 vote
1 answer

If site provides MD5 to check file, can't the comparison string also not be modified? [duplicate]

I am new to this so please bear with me. I was downloading a VM image and I was told to check the MD5. Naturally, I did but wondered, If a hacker would change the file to be downloaded from the ...
heretoinfinity's user avatar
0 votes
1 answer

How can hash keys of downloadable binaries be useful if a website has been compromised? [duplicate]

Sometimes a website that has some binaries to download, also presents their hash keys, so that a user can verify the integrity of the binary. I suppose this is mainly for security reasons, not to ...
user209974's user avatar
12 votes
9 answers

Where to download OpenBSD release ISO's over HTTPS?

OpenBSD claims to be highly secure. So why doesn't it allow downloading the release iso's over HTTPS? Or I'm missing something? Can someone please explain this to me?
LanceBaynes's user avatar
  • 6,259
23 votes
6 answers

What reputable site should I download Putty from?

I recently did a Bing search for Putty and can only guess at which distribution is "trusted", contains no malware, or sleuthing code. If you needed to download Putty for a high security Windows ...
makerofthings7's user avatar
7 votes
4 answers

when people say a file has a checked md5 hash, what exactly does that mean?

ok I was just reading this site:;content and thought of something I always ...
Pacerier's user avatar
  • 3,293
10 votes
3 answers

Downloaded file checksums

More than often next to the download button of a file there is a variety of checksums. When I download a file what security risks am I exposed to if I don't check for its integrity?
Mini Fridge's user avatar
8 votes
3 answers

How safe are copies of Firefox that are on various Mozilla mirror sites?

If I end up downloading a .dmg or .exe (depending on OS) installer from some mirror site, how can I be sure that a virus or trojan or spyware has not been added? I don't see any mechanism for ...
Mithras's user avatar
  • 81
9 votes
4 answers

Why would distributing via Google Play be more secure than distributing APKs?

Why do so many Android developers use Google Play to distribute apps instead of (or in addition to) simply putting the APK on their secure website along with a checksum or signature of it?
Geremia's user avatar
  • 1,726
1 vote
2 answers

How hash ensure integrity of data? [duplicate]

I understand what a hash is, basically we calculate a hash and append it to the message and send it to the receiver. If someone alters the message, the receiver will know because there would be a ...
xvi_16's user avatar
  • 27
4 votes
2 answers

Getting reliable checksums

Update: A version of transmission that contains malware has been distributed very recently. Quoting this ars technica article: It appears that somehow the Transmission website may have been ...
Matheor's user avatar
  • 51

15 30 50 per page