[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Checksums on ftp



Sascha,

Yeah, yeah, you just try and break an MD5 checksum anytime this
year. *cough*

Regards,

Alex.

---
PGP/GPG Fingerprint:
  EFD1 AC6C 7ED5 E453 C367  AC7A B474 16E0 758D 7ED9

-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GCM d- s:+ a--- C++++ UL++++ P L+++ E W++ N o-- K- w
O--- M- V- PS+ PE- Y PGP t+ 5 X- R tv+ b DI--- D+
G e-- h++ r--- y
------END GEEK CODE BLOCK------

On 26 Apr 2000 Sascha_M._Silbe@progbbs.dyn.ns1.net wrote:

> 
>  * Reply to message originally in area ml.debian.security
> 
> Hi!
> 
> 26 Apr 00 11:52, Ingemar =?iso-8859-1?Q?F=E4llman?= wrote to UUCP:
> 
>  I?> All debfiles has checksums right?? These checksums can be used to 
>  I?> verify if a file has been changed, so therefore checksums can be used to 
>  I?> check if someone has hacked my computer and installed a rootkit right??
> No, they can't. It is possible (and not hard to do) to change the files in a 
> way that does not change the checksum.
> The only way to really check if the files have been tampered with is to compare 
> them byte by byte with the ones in the .deb file.
> 
> CU/Lnx Sascha
> 
> Registered Linux User #77587 (http://counter.li.org)
> 
> 
> 
> 
> --  
> To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
> 


Reply to: