What is the purpose of providing an MD5 or SHA1 hash with a downloadable executa...
source link: https://www.codesd.com/item/what-is-the-purpose-of-providing-an-md5-or-sha1-hash-with-a-downloadable-executable.html
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
What is the purpose of providing an MD5 or SHA1 hash with a downloadable executable?
I thought they were there for security; to check that the file hasn't been tampered with. But surely if someone is capable of modifying the file then they are also capable of modifying the page with the hash!
What security does this actually offer?
They're usually there just to ensure you got the download complete and correct.
It does help with one security-related issue: malicious modification happens as a result of a trojan running on the target machine inserting itself. This isn't a "targeted" attack per se- the trojan just "infects" whatever exe's it can- wouldn't be smart enough to fix the hash.
Related Articles
What is the best way to test an array of hashes with RSpec?
JDBC what is the purpose of PreparedStatement # setNull
What is the purpose of the master of the system table ... Values of the chain and what are the meanings of its values?
What is the purpose of performing the task synchronously and when?
What is the purpose of constraining a type to an interface?
What is the purpose of having a separate operator & ldquo; [] & rdquo;
What is the purpose of OAuth User Token and OAuth User Secret that I receive from LinkedId when creating an application
What is the purpose of the Enumerator class in Ruby
What is the purpose of specifying the variable captured in the lambda expression?
What is the purpose of accessing a global variable with this variable in my servlet?
What is the purpose of having & ldquo; .nextDouble & rdquo; after storing an entry?
What is the purpose of SUB Instruction?
What is the purpose of XSD files?
What is the purpose of the module Underscore.lua in Lua?
Recommend
About Joyk
Aggregate valuable and interesting links.
Joyk means Joy of geeK