<html><head></head><body><div style="color:#000; background-color:#fff; font-family:lucida console, sans-serif;font-size:13px"><div id="yui_3_16_0_1_1457677476610_20222"><span id="yui_3_16_0_1_1457677476610_20299">Yes, there are many pages under debian.org and also mirrors that list a collection of files download along with files containing the checksums. However, the prominent link on the main page bypasses the page with the checksums. </span></div><div id="yui_3_16_0_1_1457677476610_20535"><span id="yui_3_16_0_1_1457677476610_20299">Rick pointed out how to find the intermediate page that includes the sums. That page is skipped if one just clicks on "Download". <br></span></div><div><br><span id="yui_3_16_0_1_1457677476610_20299"></span></div><div dir="ltr"><span id="yui_3_16_0_1_1457677476610_20299">I used to do the checksums routinely, but never had problem with a file that had downloaded, but had errors. So I was getting lax. That is until it was reported that a different website had been hacked and people computers were being infected and one of the precautions should have been to verify the checksum of the download.<br></span></div><div><br><span id="yui_3_16_0_1_1457677476610_20299"></span></div><div><span id="yui_3_16_0_1_1457677476610_20299"><br></span></div><div class="qtdSeparateBR"><br><br></div><div style="display: block;" id="yui_3_16_0_1_1457677476610_20231" class="yahoo_quoted"> <div id="yui_3_16_0_1_1457677476610_20230" style="font-family: lucida console, sans-serif; font-size: 13px;"> <div id="yui_3_16_0_1_1457677476610_20229" style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div id="yui_3_16_0_1_1457677476610_20228" dir="ltr"> <font id="yui_3_16_0_1_1457677476610_20233" face="Arial" size="2"> <hr size="1"> <b><span style="font-weight:bold;">From:</span></b> Dana Goyette <danagoyette@gmail.com><br> <b><span style="font-weight: bold;">To:</span></b> Rick Moen <rick@linuxmafia.com>; "conspire@linuxmafia.com" <conspire@linuxmafia.com> <br> <b><span style="font-weight: bold;">Sent:</span></b> Thursday, March 10, 2016 9:20 PM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: [conspire] [Felton LUG] Fwd: Apple Users Targeted<br> </font> </div> <div id="yui_3_16_0_1_1457677476610_20235" class="y_msg_container"><br><div id="yiv0213036755"><style>#yiv0213036755 #yiv0213036755 --
_filtered #yiv0213036755 {panose-1:2 4 5 3 5 4 6 3 2 4;}
_filtered #yiv0213036755 {font-family:Calibri;panose-1:2 15 5 2 2 2 4 3 2 4;}
#yiv0213036755
#yiv0213036755 p.yiv0213036755MsoNormal, #yiv0213036755 li.yiv0213036755MsoNormal, #yiv0213036755 div.yiv0213036755MsoNormal
{margin:0in;margin-bottom:.0001pt;font-size:11.0pt;}
#yiv0213036755 a:link, #yiv0213036755 span.yiv0213036755MsoHyperlink
{color:blue;text-decoration:underline;}
#yiv0213036755 a:visited, #yiv0213036755 span.yiv0213036755MsoHyperlinkFollowed
{color:#954F72;text-decoration:underline;}
#yiv0213036755 .yiv0213036755MsoChpDefault
{}
_filtered #yiv0213036755 {margin:1.0in 1.0in 1.0in 1.0in;}
#yiv0213036755 div.yiv0213036755WordSection1
{}
#yiv0213036755 </style><div id="yui_3_16_0_1_1457677476610_20239"><div id="yui_3_16_0_1_1457677476610_20238" class="yiv0213036755WordSection1"><div id="yui_3_16_0_1_1457677476610_20237" class="yiv0213036755MsoNormal">I usually use <a id="yui_3_16_0_1_1457677476610_20241" rel="nofollow" shape="rect" target="_blank" href="http://mirrors.kernel.org/">http://mirrors.kernel.org</a> as my main site for downloading CD images. They <i>do</i> list the checksums and signatures quite easily. Also, while typing the URL, I decided to check if they support https – yes, they do! So: <a id="yui_3_16_0_1_1457677476610_20823" rel="nofollow" shape="rect" target="_blank" href="https://mirrors.kernel.org/">https://mirrors.kernel.org</a></div><div id="yui_3_16_0_1_1457677476610_20260" class="yiv0213036755MsoNormal"><span style="font-size:12.0pt;"> </span></div><div class="yiv0213036755yqt8622076284" id="yiv0213036755yqt31727"><div id="yui_3_16_0_1_1457677476610_20298" style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in;"><div id="yui_3_16_0_1_1457677476610_20297" class="yiv0213036755MsoNormal" style="border:none;padding:0in;"><b>From: </b><a rel="nofollow" shape="rect" ymailto="mailto:rick@linuxmafia.com" target="_blank" href="mailto:rick@linuxmafia.com">Rick Moen</a><br clear="none"><b>Sent: </b>Tuesday, March 8, 2016 11:51 PM<br clear="none"><b>To: </b><a rel="nofollow" shape="rect" ymailto="mailto:conspire@linuxmafia.com" target="_blank" href="mailto:conspire@linuxmafia.com">conspire@linuxmafia.com</a><br clear="none"><b>Subject: </b>Re: [conspire] [Felton LUG] Fwd: Apple Users Targeted</div></div><div id="yui_3_16_0_1_1457677476610_20394" class="yiv0213036755MsoNormal"><span style="font-size:12.0pt;"> </span></div><div class="yiv0213036755MsoNormal">Quoting Paul Zander (paulz@ieee.org):</div><div id="yui_3_16_0_1_1457677476610_20264" class="yiv0213036755MsoNormal"> </div><div class="yiv0213036755MsoNormal">> So back to my personal project of downloading assorted Linux iso files. </div><div class="yiv0213036755MsoNormal">> </div><div class="yiv0213036755MsoNormal">> Finding the checksums sometimes isn't easy.</div><div class="yiv0213036755MsoNormal"> </div><div class="yiv0213036755MsoNormal">You're right, and it's annoying, and I think we can blame everyone's </div><div class="yiv0213036755MsoNormal">mania for a simple, drool-proof WebUI:</div><div class="yiv0213036755MsoNormal"> </div><div id="yui_3_16_0_1_1457677476610_20272" class="yiv0213036755MsoNormal">> For example, go to www.debian.org</div><div class="yiv0213036755MsoNormal">> </div><div id="yui_3_16_0_1_1457677476610_20296" class="yiv0213036755MsoNormal">> In the upper right is a box, "Download Debian 8.3"</div><div class="yiv0213036755MsoNormal">> </div><div class="yiv0213036755MsoNormal">> Click on the box and it starts downloading </div><div class="yiv0213036755MsoNormal">> debian-8.3.0-amd64-i386-netinst.iso</div><div class="yiv0213036755MsoNormal">> But where is the file with the checksums for that particular file?</div><div class="yiv0213036755MsoNormal"> </div><div class="yiv0213036755MsoNormal">Not shown anywhere near that soothingly green button, nor even anywhere</div><div class="yiv0213036755MsoNormal">on that page. The webmonkey in question should be ashamed.</div><div id="yui_3_16_0_1_1457677476610_20275" class="yiv0213036755MsoNormal"> </div><div class="yiv0213036755MsoNormal">It's findable if you know where it _probably is_, which is in the same</div><div class="yiv0213036755MsoNormal">directory tree the ISO is in. If you have years of working around</div><div class="yiv0213036755MsoNormal">stupid webmonkeys the way I do, the subsequent drill is almost</div><div class="yiv0213036755MsoNormal">automatic:</div><div class="yiv0213036755MsoNormal"> </div><div class="yiv0213036755MsoNormal">1. Where's the download link specifically? Right-click the download</div><div id="yui_3_16_0_1_1457677476610_20293" class="yiv0213036755MsoNormal">button, to grab the URL. Editify. It's...</div><div class="yiv0213036755MsoNormal">http://cdimage.debian.org/debian-cd/8.3.0/multi-arch/iso-cd/debian-8.3.0-amd64-i386-netinst.iso</div><div class="yiv0213036755MsoNormal"> </div><div class="yiv0213036755MsoNormal">Strip off the filename portion, to get the basedir URL. Load that in a</div><div class="yiv0213036755MsoNormal">browser. URL is (of course)</div><div id="yui_3_16_0_1_1457677476610_20278" class="yiv0213036755MsoNormal">http://cdimage.debian.org/debian-cd/8.3.0/multi-arch/iso-cd/ .</div><div class="yiv0213036755MsoNormal"> </div><div class="yiv0213036755MsoNormal">Well, howdy there! Your basic 1993 rivets-and-suspenders Web page with</div><div class="yiv0213036755MsoNormal">a bunch of too-much-text, a page that haplessly fails to put most-needed</div><div class="yiv0213036755MsoNormal">stuff on top. A page written by engineers, yay. It's so bad that</div><div id="yui_3_16_0_1_1457677476610_20291" class="yiv0213036755MsoNormal">oldtimers will feel right at home. And at the bottom it has an</div><div class="yiv0213036755MsoNormal">Apache-autoindex directory listing of files. In other words, the</div><div class="yiv0213036755MsoNormal">prepended too-much-text stuff was what Apache parsed from a .message (or</div><div class="yiv0213036755MsoNormal">whatever it is) file. </div><div class="yiv0213036755MsoNormal"> </div><div class="yiv0213036755MsoNormal">Below that appears the actual Apache autoindex, which is this (edited </div><div class="yiv0213036755MsoNormal">slightly for e-mail):</div><div class="yiv0213036755MsoNormal"> </div><div class="yiv0213036755MsoNormal">Name Last modified Size </div><div class="yiv0213036755MsoNormal">.. - </div><div class="yiv0213036755MsoNormal">MD5SUMS 2016-01-24 19:06 70 </div><div id="yui_3_16_0_1_1457677476610_20282" class="yiv0213036755MsoNormal">MD5SUMS.sign 2016-01-24 19:08 819 </div><div class="yiv0213036755MsoNormal">SHA1SUMS 2016-01-24 19:06 78 </div><div class="yiv0213036755MsoNormal">SHA1SUMS.sign 2016-01-24 19:08 819 </div><div class="yiv0213036755MsoNormal">SHA256SUMS 2016-01-24 19:06 102 </div><div class="yiv0213036755MsoNormal">SHA256SUMS.sign 2016-01-24 19:08 819 </div><div id="yui_3_16_0_1_1457677476610_20288" class="yiv0213036755MsoNormal">SHA512SUMS 2016-01-24 19:06 166 </div><div class="yiv0213036755MsoNormal">SHA512SUMS.sign 2016-01-24 19:08 819 </div><div class="yiv0213036755MsoNormal">debian-8.3.0-amd64-i386-netinst.iso 2016-01-23 23:20 556M </div><div class="yiv0213036755MsoNormal"> </div><div class="yiv0213036755MsoNormal">So, there you go -- an actually excessive selection of checksums, and</div><div class="yiv0213036755MsoNormal">gpg signatures for each.</div><div class="yiv0213036755MsoNormal"> </div><div class="yiv0213036755MsoNormal"> </div><div class="yiv0213036755MsoNormal">It's annoying that one is forced to get creative and dig for those, but</div><div class="yiv0213036755MsoNormal">at least logic, persistence, and lengthy Internet experience _can_ get</div><div id="yui_3_16_0_1_1457677476610_20285" class="yiv0213036755MsoNormal">you there.</div><div class="yiv0213036755MsoNormal"> </div><div class="yiv0213036755MsoNormal">I'd say this is the sort of brain damage sadly likely when the online</div><div class="yiv0213036755MsoNormal">culture presses to hide all possible detail: Exactly one operation </div><div class="yiv0213036755MsoNormal">(in this case, grab the ISO) is made very easy; every other operation is</div><div class="yiv0213036755MsoNormal">made harder because artifically invisible.</div><div class="yiv0213036755MsoNormal"> </div><div class="yiv0213036755MsoNormal">The depressing bit is: In general, Debian Project is better than</div><div class="yiv0213036755MsoNormal">everyone else at consistently providing checksums and verifiable</div><div class="yiv0213036755MsoNormal">signatures. And yet, the novice-friendly front-door page for the</div><div class="yiv0213036755MsoNormal">underlying files (in this case) goes out of its way to _hide_ all of</div><div class="yiv0213036755MsoNormal">those and present only the ISO.</div><div class="yiv0213036755MsoNormal"> </div><div class="yiv0213036755MsoNormal">I have no solution, but can sit with you and admire the problem.</div><div class="yiv0213036755MsoNormal"> </div><div class="yiv0213036755MsoNormal"> </div><div class="yiv0213036755MsoNormal">_______________________________________________</div><div class="yiv0213036755MsoNormal">conspire mailing list</div><div class="yiv0213036755MsoNormal">conspire@linuxmafia.com</div><div class="yiv0213036755MsoNormal">http://linuxmafia.com/mailman/listinfo/conspire</div></div><div class="yiv0213036755MsoNormal"> </div></div></div></div><br><div class="yqt8622076284" id="yqt43918">_______________________________________________<br clear="none">conspire mailing list<br clear="none"><a shape="rect" ymailto="mailto:conspire@linuxmafia.com" href="mailto:conspire@linuxmafia.com">conspire@linuxmafia.com</a><br clear="none"><a shape="rect" href="http://linuxmafia.com/mailman/listinfo/conspire" target="_blank">http://linuxmafia.com/mailman/listinfo/conspire</a><br clear="none"></div><br><br></div> </div> </div> </div></div></body></html>