Mr O wrote:

> I've downloaded the same file about 5 times from 2 different
> locations and 3 or 4 out of 5 times I've had the same md5sum.
> Problem is it has never matched the one listed on the sites. Has
> anyone else tried to download Fedora Core 2 DVD? I'm hesitant to
> burn it and waste a DVD.

You can trust md5sums.  If they don't match, the file is not right.

It's possible an attacker broke into the web server and changed the
ISO file.  It's also possible that the site administrator just screwed
up and posted the wrong md5sums or forgot to update them with new
images.  Is the .md5 file newer than the .iso file?
        
If you think the ISO is safe to use, you can mount it in loopback mode
and look it over before burning it.

        # mkdir -p /mnt/dvdimage
        # mount -o ro,loop some.iso /mnt/dvdimage
        # ls -RA /mnt/dvdimage          # or whatever
        # umount /mnt/dvdimage

-- 
Bob Miller                              K<bob>
kbobsoft software consulting
http://kbobsoft.com                     [EMAIL PROTECTED]
_______________________________________________
EUGLUG mailing list
[EMAIL PROTECTED]
http://www.euglug.org/mailman/listinfo/euglug

Reply via email to