You are not logged in.
We are checking the iso integrity with sha and b2sum. Why its necessary and what is the danger about it ? And also is it needed for every download even with the same version ?
Last edited by jojo06 (2024-02-14 00:56:42)
Offline
To catch transfer errors or manipulations corrupting the image resulting in bad behavior/boot failures.
Stuff one happens to use checksums for.
You can also just ass·u·me that the image is valid and the risk of that is that it's not.
Offline
In my about... Say 6 Arch installs, I've never had to check the integrity haha.
Offline
In my about... Say 6 Arch installs, I've never had to check the integrity haha.
Im heading to 10 its 7-8 used 3 times in the last one.. did not ![]()
@seth
I can assume because the same version i checked ? Or do you know its okay ? It can hurt my system by manipulated image such as rat/botnet ? Is it rarely happening or sometimes ?
Offline
You want to check every file you downloaded *once* - if you dd the same local file a dozen times on a usb key you don't have to check it before every single dd.
I've never faced a bogus checksum, it's precaution and good practice - not a frequent threat. At least not in civil democracies ![]()
Offline
"At least not in civil democracies" sorry did not get one.
I mean, i downloaded yesterday and today again. Did not use dd in both. I used popsicle and in second i used rufus. Checked yesterday but today i did not.
Offline
What you're using to write the image is irrelevant.
https://en.wikipedia.org/wiki/File_verification
https://en.wikipedia.org/wiki/Man-in-the-middle_attack
Offline