downloaded dvd and live 12 times,hash alway same but wrong!

James Wilkinson fedora at aprilcottage.co.uk
Sun Oct 25 22:28:56 UTC 2009


David wrote:
> You are aware that the disk will offer to test itself if you boot it up?
> No smoke or mirrors needed.  :-)

Depends how paranoid you are. Really, you should check the GPG checksum
on a believed-to-be-good computer…

gpg --verify F12-Beta-x86_64-Live-CHECKSUM

The integrated disk check will guard against a corrupted download, but
not against a deliberately hacked download.

Then again, it’s probably easier for a programmer to get an “accidental”
vulnerability in a Fedora package than to hack the download. There was
an attempt to corrupt the Linux kernel’s BitKeeper repository, back when
it had one, that used “= 0” (make this variable zero) instead of “== 0”
(check if this variable is zero), which was supposed to have looked like
a careless programming error.

James.

-- 
E-mail:     james@ | It is a mistake to allow any mechanical object to realise
aprilcottage.co.uk | that you are in a hurry.




More information about the users mailing list