[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

How to validate Debian woody CDs?



Hello,

a friend of mine recently bought some Debian woody CDs.
Because the CDs do not look very official she wants to
verify that these are really Debian CDs and not something
trojanized.

I suggested to her to compare the output of

    md5sum /dev/cdrom

with the corresponding values from

    http://cdimage.debian.org/jigdo-area/current/jigdo/i386/MD5SUMS

Is this a good way to check wheter the CDs are official
Debian CDs?

The result was that the checksums did match for CD #1, but
did NOT match for the remaining CDs.  When she asked the
dealer he told her, that this does not indicate a problem,
but could be caused by "additional bits at the beginning or
end of the CD".  Does this make sense?

Jochen
-- 
                                         Omm
                                      (0)-(0)
http://www.mathematik.uni-kl.de/~wwwstoch/voss/privat.html

Attachment: pgpZRgkRmlX1R.pgp
Description: PGP signature


Reply to: