4 ms·
An md5 can be created for the trojaned binary and be posted along with it. Not to mention that the md5 checksum is a very poor choice for this purpose because
by pmoriarty 3y ago
An md5 can be created for the trojaned binary and be posted along with it.
Not to mention that the md5 checksum is a very poor choice for this purpose because of the ease of creating md5 collisions.
- hattmall 3y agoBut not on the official page, right? And there's nothing stopping someone from doing that now is there? I don't see how the original authors providing binaries is less secure than anything else.
- thdespou 3y agoYeah but still hackers can abuse SEO and direct visits to their pages. If you are not careful you might accidentally download a malicious binary.
- pmoriarty 3y agoThe official page can be hacked, and both malware and md5 of the malware can be placed there. That's the whole point of using a cryptographic signature backed by a web of trust instead of a mere hash.
- robertlagrant 3y agoWhere would the hash be advertised?