Re: 2 attempts failed: 1) cmp; 2) /home/a/scripts/check_debian_iso

[Andrew F Comly 康大成 <andrew.comly@protonmail.com>]

Pascal & other security knowledgible persons,

   Thanks for your advice on how to deal with this problem.  Below are my two attempts, along with their failed results.

Attempt 01

$ ls

debian-8.5.0-i386-lxde-CD-1.checksum  SHA512SUMS

debian-8.5.0-i386-lxde-CD-1.iso       SHA512SUMS.sign

Debian8_i386_SHA256SUMS.sign

$ wget https://people.debian.org/~danchev/debian-iso/check_debian_iso

~/scripts$ chmod +x check_debian_iso

$ /home/a/scripts/check_debian_iso SHA512SUMS debian-8.5.0-i386-lxde-CD-1.iso /dev/sdb

Does not look like an ISO 9660 filesystem: '/dev/sdb' magic='  '

 {fail}

Am I supposed to edit the script and put something in for magic=' '?

Attempt 02

$ sudo cmp /media/LG/AC/bckup/Install/2_Bootable-OS/Debian/i386/debian-8.5.0-i386-lxde-CD-1.iso /dev/sdb

[sudo] password for a:

/media/LG/AC/bckup/Install/2_Bootable-OS/Debian/i386/debian-8.5.0-i386-lxde-CD-1.iso /dev/sdb differ: byte 1, line 1

Sincerely,

Andrew F Comly

==================================================================================

-------- Original Message --------

Subject: Re: you iso's may have been hacked

Local Time: August 10, 2016 10:17 AM

UTC Time: August 10, 2016 10:17 AM

From: pascal@plouf.fr.eu.org

To: debian-user@lists.debian.org

Le 10/08/2016 à 08:36, Thomas Schmitt a écrit :

>

> Andrew F Comly wrote:

>

>> Notice how the two sha512sum numbers (local vs burnt usb) don't match!

Of course : the image and the device do not have the same size.

> Determine the ISO size on /dev/sdb by program isosize and curb its reading

> by help of program dd, or try

>

> wget https://people.debian.org/~danchev/debian-iso/check_debian_iso

>

> ./check_debian_iso SHA512SUMS debian-8.5.0-i386-lxde-CD-1.iso /dev/sdb

Or use 'cmp' to compare the USB device contents with the image file.

cmp debian-8.5.0-i386-lxde-CD-1.iso /dev/sdb

If the comparison ends by reaching the end of the image file, there is

no difference.