[elinks-users] Broken MD5 checksums for 0.11 Stable GIT snapshot

Nelson H. F. Beebe beebe at math.utah.edu
Mon Jan 2 06:35:27 PST 2006


I just downloaded 

	http://elinks.or.cz/download/elinks-0.11.0.tar.bz2
	http://elinks.or.cz/download/elinks-0.11.0.tar.bz2.md5
	http://elinks.or.cz/download/elinks-current-stable.tar.bz2
	http://elinks.or.cz/download/elinks-current-stable.tar.bz2.md5
	http://elinks.or.cz/download/elinks-current-stable.tar.gz
	http://elinks.or.cz/download/elinks-current-stable.tar.gz.md5

While the checksums match on the 0.11.0 archive, they do not on the
current-stable one:

	% cat elinks-current-stable.tar.bz2.md5
	0b96713dbe2575de71879c1c8d227636  elinks-current-stable.tar.bz2

	% md5sum elinks-current-stable.tar.bz2
	cc4f946be41dec5bef5957fd9786f945  elinks-current-stable.tar.bz2

	% cat elinks-current-stable.tar.gz.md5
	effb899f95b9fe1c0a9dd67099e8b3cb  elinks-current-stable.tar.gz

	% md5sum elinks-current-stable.tar.gz
	7c0ba6139ac98700672ad1f98dac6fc5  elinks-current-stable.tar.gz

I strongly urge elinks developers to move away from separate checksum
files, which are only useful to validating integrity of downloads;
they are useless against tampering, and that is the big problem on the
Internet today.  In 2003, ftp.gnu.org was compromised, in 2004,
www.mozilla.org, and this morning carried news that knoppix-std.org
has been a victim.

Please consider moving to digital signatures, as the GNU Project now
requires, with signatures properly registered in several key servers.

There is a tutorial on how to do this under my picture on my home
page:

	http://www.math.utah.edu/~beebe/PGP-notes.html

We also discuss the topic in section 10.7.4 of our book, Classic Shell
Scripting:

	http://www.math.utah.edu/~beebe/books/css/

-------------------------------------------------------------------------------
- Nelson H. F. Beebe                    Tel: +1 801 581 5254                  -
- University of Utah                    FAX: +1 801 581 4148                  -
- Department of Mathematics, 110 LCB    Internet e-mail: beebe at math.utah.edu  -
- 155 S 1400 E RM 233                       beebe at acm.org  beebe at computer.org -
- Salt Lake City, UT 84112-0090, USA    URL: http://www.math.utah.edu/~beebe/ -
-------------------------------------------------------------------------------



More information about the elinks-users mailing list