8.10 hashes

Amit Joshi mckagan at gmail.com
Tue Nov 4 07:17:09 UTC 2008


On Sat, Nov 1, 2008 at 8:46 PM, Dotan Cohen <dotancohen at gmail.com> wrote:

> 2008/11/1 Karl Larsen <k5di at zianet.com>:
> >    I do not know what hashes are but the 8.10 LiveCD does have a media
> > test and I always use it. It also always seems to pass and load.
> >
>
> Hashes are important for being certain that the .iso downloaded has
> not been tampered with (for instance, has not had malicious software
> added).
>
>

I don't know why Ubuntu is still following the MD5 trend. It was proved
quite a while ago that MD5 sums may not be unique. The chances of getting
the same MD5sum for two different ISOs are bleak but it has been recommended
that SHA1 be used to check ISO consistency. AFAIK Fedora Core and a few
other distros have been using SHA1sum for a while now.

-- 
Regards,
Amit Joshi
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20081104/c1b15fd7/attachment.html>


More information about the ubuntu-users mailing list