sha1sum?

[Tim]

On Wed, 2005-10-12 at 04:20 -0700, Ciccio Pasticcio wrote:

> just downloaded the fc4 i386 on dvd.
> cheked the sha1sum and the risult is differente from
> the one pubished on fedora  site.
> i mounted the iso and everything went fine, no
> currupted files. burned on a dvd ad it works.
> 
> downloaded the same file from a different location and
> did the same as above. everything fine but another
> sha1sum, different from the one published by fedora
> and from the first iso i downloaded.
> so what's wrong? since the 2 isos seem to be all
> right?
> should i trust these files?

I wouldn't "trust" them, though whether that's because there's an error,
or if it might be due to deliberately sabotage, we can't tell.  And
that's why you don't trust things that fail such tests.

The fact that all *appears* well doesn't mean that it actually is.  You
could be compromised without knowing it.  But it's probably more likely
that some RPM that you haven't installed was ruined, so you didn't see
any errors while installing.

-- 
Don't send private replies to my address, the mailbox is ignored.
I read messages from the public lists.