Technically, you could check the hash, no? Of course, you'd need a reliable source to give you the hash, so you could make sure you weren't given a fake hash of

Technically, you could check the hash, no? Of course, you'd need a reliable source to give you the hash, so you could make sure you weren't given a fake hash of the fake download. So, you'd lookup the hash on a secure computer and then test the download after you insecurely downloaded it. Of course, this is more than a general consumer would know or care to bother with.