Distributions and hashes
- by Don Mackenzie
Has anyone ever had an incidence of downloading software from a genuine site, where an MD5 or SHA series hash for the download is also supplied and then discovered that the hash calculated from the downloaded artifact doesn't match the published hash?
I understand the theory but am curious how prevalent the problem is. Many software publishers seem to discount the threat.