My Apologies. Point understood.<br><br clear="all">Regards<br><br>Narendra Diwate<br><br><br> <br><br><div class="gmail_quote">On Tue, Jun 15, 2010 at 09:39, VIGNESH PRABHU <span dir="ltr"><<a href="mailto:stove311987@gmail.com">stove311987@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"> <br><br><div class="gmail_quote"><div class="im">On Tue, Jun 15, 2010 at 9:28 AM, Narendra Diwate <span dir="ltr"><<a href="mailto:narendra.diwate@gmail.com" target="_blank">narendra.diwate@gmail.com</a>></span> wrote:<br> <blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"> <div class="gmail_quote"><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"><div class="gmail_quote"><font color="#888888">Not sure </font>how that will help. If someone has been able to upload or put a compromised package on a site, he can also put a md5sum for it. When you are downloading from a untrusted place, everything there can be suspect.<br> </div></blockquote><div></div></div></blockquote></div><div>Well Nigel actually was suggesting you to check the md5sum from the real source or from the main repository. The idea is that though it is advisable to download packages from nearest mirror, it is always good to confirm that the package uploaded by the mirror is a genuine package.<br> </div></div>-- <br>Regards, <br>Vignesh<br>B. Tech in Computer Science<br>National Institute Of Technology-Durgapur<br><br><br><br> <br>--<br> ubuntu-in mailing list<br> <a href="mailto:ubuntu-in@lists.ubuntu.com">ubuntu-in@lists.ubuntu.com</a><br> <a href="https://lists.ubuntu.com/mailman/listinfo/ubuntu-in" target="_blank">https://lists.ubuntu.com/mailman/listinfo/ubuntu-in</a><br> <br></blockquote></div><br>