4 ms·
Are you saying this software can inject malicious code into a disk image and/or falsify the integrity report if you look at the md5 checksum of said image?
by Wingman4l7 13y ago
Are you saying this software can inject malicious code into a disk image and/or falsify the integrity report if you look at the md5 checksum of said image?
- lifeguard 13y agoNo. But it is also hard to trust a frozen OS. How often should one refresh the ISO?
- AJ007 13y agoEven if your OS is out of date: 1 - Malware should be purged on shut down 2 - Only specific sites are accessed, e.g. banking domains, minimizing the risk of picking something up through e-mail or careless browsing. 3 - Obviously you shouldn't be running a server. 4 - You should still practice safe browsing, being aware of packet injection via public WiFi. If you are being specifically targeted, that is another issue.
- Asterick6 13y agoAlso, you shouldn't even be using md5 anyways. It's essentially broken and has serious vulnerabilities. Use sha2 or sha3.
- Wingman4l7 13y agoThat's what I get for being specific. >.< My point was that it's unlikely that you're dealing with malware so sophisticated that it can successfully corrupt any given OS disk image and/or fake-out a checksum verification on same -- and if it can, you're probably screwed anyway.
- jlgaddis 13y ago> That's what I get for being specific. That's one little thing about HN -- most people are so literal, completely missing the point. I'm sure that it's not (yet) possible to do that, although that would be a huge breakthrough. Imagine malware that could detect what (OS) is on the ISO image and inject itself into the files inside the ISO stealthily... all at run-time when you click the "burn this ISO to this CD" button. Yeah, we'd just be screwed at that point.