[sf-lug] (forw) Re: How to check distro checksums and signatures

[Rick Moen]

I'm assuming Bobbie veered off the mailing list into private mail by
accident.

----- Forwarded message from Bobbie Sellers <bliss-sf4ever at dslextreme.com> -----

Date: Sun, 21 Feb 2016 18:29:06 -0800
From: Bobbie Sellers <bliss-sf4ever at dslextreme.com>
To: Rick Moen <rick at linuxmafia.com>
Subject: Re: [sf-lug] How to check distro checksums and signatures

Well Rick,
    I agree with you about checksums and nearly every item in my
distribution library is check-summed before it goes onto a CD or DVD.
It is a good idea to look for the checksums before download.
    Some distribution make it very difficult to locate the checksums.

    However in the Linux Mint instance the checksums of the forged
disks were also hacked so that when you thought you were getting
the data from the Mint site you were getting it from the forged site.

    Even magazines can have bad disks and the creator of the distribution
will say that the checksum is not supplied with the disk because the
magazine or other publisher may have altered the supplied material.




On 02/21/2016 04:26 PM, Rick Moen wrote:

[RM:  Snip entire prior thread, which Bobie quoted.]

----- End forwarded message -----