3 ms·
I wonder how much work it would be to modify that one-liner to include an MD5 or SHA1 check? Of course it might then be shell and OS-specific... Unless curl or
by lstamour 13y ago
I wonder how much work it would be to modify that one-liner to include an MD5 or SHA1 check? Of course it might then be shell and OS-specific...
Unless curl or wget can confirm the sha1? Oh... found it! http://superuser.com/questions/453823/is-there-a-tool-that-automatically-downloads-and-compares-md5sums http://superuser.com/questions/453823/is-there-a-tool-that-a...
- nmat 13y agoWithout HTTPS in the main site that is mostly useless
- lstamour 13y agoTrue. Though for a bit of benefit, if the download was hosted separately from the site, that'd be two things to hack. The downside, of course, is that script updates would require new SHA1s. It would be best, then, to insert version numbers into the installer scripts, and a version check. That way if a new version comes out, the installer could warn about it (y/n), while still verifying the SHA1.