8

What is the purpose of providing an MD5 or SHA1 hash with a downloadable executa...

 2 years ago
source link: https://www.codesd.com/item/what-is-the-purpose-of-providing-an-md5-or-sha1-hash-with-a-downloadable-executable.html
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.

What is the purpose of providing an MD5 or SHA1 hash with a downloadable executable?

advertisements

I thought they were there for security; to check that the file hasn't been tampered with. But surely if someone is capable of modifying the file then they are also capable of modifying the page with the hash!

What security does this actually offer?


They're usually there just to ensure you got the download complete and correct.

It does help with one security-related issue: malicious modification happens as a result of a trojan running on the target machine inserting itself. This isn't a "targeted" attack per se- the trojan just "infects" whatever exe's it can- wouldn't be smart enough to fix the hash.

Related Articles

What is the best way to test an array of hashes with RSpec?

I'm trying to test array of hashes with RSpec, but I don't know how to test them because the hash order could change. E.G: [{name: 'John', age: 40, country: {abrev: 'US', name: 'United States'}}, {name: 'Peter', age: 43, country: {abrev: 'US', name:

JDBC what is the purpose of PreparedStatement # setNull

I did an experiment with a table having a VARCHAR column with null values trying to get the number of rows that have a specific column NULL. I used three forms: form A SELECT COUNT(*) FROM buyers WHERE buye_resp IS NULL form B SELECT COUNT(*) FROM bu

What is the purpose of the master of the system table ... Values ​​of the chain and what are the meanings of its values?

What is the purpose of system table master..spt_values? Why was it provided and how one should use it? What are the meanings of its type, low, high values? Update: Google search gives thousands of " its uses", for example: to split column using

What is the purpose of performing the task synchronously and when?

what is the purpose of running task synchronously public static void RunMeSync() { for(int i = 0; i < 9999; i++) { ListBox1.Items.Add(i.ToString()); } } public static void Main() { Task T1 = new Task(()=>RunMeSync); T1.RunSynchronously(); Task T2 =

What is the purpose of constraining a type to an interface?

What is the purpose of allowing the following? class A<T> where T : IFoo { private T t; A(T t) { this.t = t; } /* etc */ } How is this meaningfully different from just declaring A to require an IFoo wherever it needs one? class A { private IFoo foo;

What is the purpose of having a separate operator & ldquo; [] & rdquo;

Looks like operator new and operator new[] have exactly the same signature: void* operator new( size_t size ); void* operator new[]( size_t size ); and do exactly the same: either return a pointer to a big enough block of raw (not initialized in any

What is the purpose of OAuth User Token and OAuth User Secret that I receive from LinkedId when creating an application

When creating a new application in LinkedIn, I get 4 separate codes: API Key Secret Key OAuth User Token OAuth User Secret I'm using the first two in the OAuth flow. What is the purpose of the last two?After reading some more, I figured it's my own u

What is the purpose of the Enumerator class in Ruby

If I create an Enumertor like so: enum = [1,2,3].each => #<Enumerator: [1, 2, 3]:each> enum is an Enumerator. What is the purpose of this object? I can't say this: enum { |i| puts i } But I can say this: enum.each { |i| puts i } That seems redund

What is the purpose of specifying the variable captured in the lambda expression?

I have this code: int i = 0; [&i](){i++;}(); But I can omit i and just use: [&](){i++;}(); What is the purpose of specifying &i? (and similarly =var and =). Is it affecting compile time or runtime performance?&i means only i is captured as

What is the purpose of accessing a global variable with this variable in my servlet?

This is the sample servlet public class XYZServlet extends HttpServlet { public static final long serialVersionUID = 1L; protected long a = -1; protected String str = null; protected responseJSON = null; public XYZServlet() { super(); } protected voi

What is the purpose of having & ldquo; .nextDouble & rdquo; after storing an entry?

After programming in C++ for a few months, and getting to an intermediate level, I decided to start learning Java. I'm having some trouble wrapping my head around how the scanner variable works. In C++, "cin>>" was very straightforward in

What is the purpose of SUB Instruction?

I'm learning assembly on my own, I have a confusion that I would like to clear. So from what I understand a x86 computer uses the same circuit for addition and subtraction. For subtraction a negative number is converted to its 2 complement and then t

What is the purpose of XSD files?

though we can query on the xml file from c# (.net). why need of .xsd file ? I know it is metadata file of particular xml file. we can specify the relationships in xsd. but what its functioning then ? Sure: See, I have the xml: <?xml version="1.0&q

What is the purpose of the module Underscore.lua in Lua?

In some source code I saw the usage of "Underscore.lua" module. _ = require 'underscore' The description says the following: Underscore.lua is a Lua library that provides a set of utility functions for dealing with iterators, arrays, tables, and

About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK