Leonardo is looking for a verified MD5 hash value for the NH 2.1.2 distribution files so that he can verify to his management that they are unaltered.
The verification process they are trying to use is badly flawed. If someone can alter the distributed files thereby causing the MD5 hash check to fail, those same individuals can also create a new MD5 hash to match the altered code. An MD5 hash check is only useful for verifying that all of the file was downloaded, but that integrity check is inherent in the zip file process. People have falsely advertised the MD5 hash check as being a security function, rather than just an integrity function. John Davidson On Mon, Jul 12, 2010 at 12:11 PM, Fabio Maulo <[email protected]> wrote: > I don't know... I'm guessing since the title of the thread is "MD5 for NH > 2.1.2 GA?" > > > On Mon, Jul 12, 2010 at 1:08 PM, Tuna Toksoz <[email protected]> wrote: > >> Looks like one of us misunderstood the question. >> >> Tuna Toksöz >> Eternal sunshine of the open source mind. >> >> http://devlicio.us/blogs/tuna_toksoz >> http://tunatoksoz.com >> http://twitter.com/tehlike >> >> >> >> >> On Mon, Jul 12, 2010 at 7:06 PM, Fabio Maulo <[email protected]>wrote: >> >>> And the IUserType >>> >>> http://code.google.com/p/unhaddins/source/browse/trunk/uNhAddIns/uNhAddIns/UserTypes/EncryptedString.cs >>> >>> >>> On Mon, Jul 12, 2010 at 1:00 PM, Fabio Maulo <[email protected]>wrote: >>> >>>> >>>> http://msdn.microsoft.com/en-uk/library/system.security.cryptography.md5.aspx >>>> >>>> >>>> On Mon, Jul 12, 2010 at 11:42 AM, Leonardo <[email protected]> wrote: >>>> >>>>> Hi all, >>>>> >>>>> I need the hash (MD5 or SHA-1 or anything) in order to use it in the >>>>> company I work for. Anyone knows were can I find it from a trusted >>>>> source? >>>>> >>>>> Thanks in advance. >>>>> >>>>> Leo >>>>> >>>>> -- >>>>> You received this message because you are subscribed to the Google >>>>> Groups "nhusers" group. >>>>> To post to this group, send email to [email protected]. >>>>> To unsubscribe from this group, send email to >>>>> [email protected]<nhusers%[email protected]> >>>>> . >>>>> For more options, visit this group at >>>>> http://groups.google.com/group/nhusers?hl=en. >>>>> >>>>> >>>> >>>> >>>> -- >>>> Fabio Maulo >>>> >>>> >>> >>> >>> -- >>> Fabio Maulo >>> >>> -- >>> You received this message because you are subscribed to the Google Groups >>> "nhusers" group. >>> To post to this group, send email to [email protected]. >>> To unsubscribe from this group, send email to >>> [email protected]<nhusers%[email protected]> >>> . >>> For more options, visit this group at >>> http://groups.google.com/group/nhusers?hl=en. >>> >> >> -- >> You received this message because you are subscribed to the Google Groups >> "nhusers" group. >> To post to this group, send email to [email protected]. >> To unsubscribe from this group, send email to >> [email protected]<nhusers%[email protected]> >> . >> For more options, visit this group at >> http://groups.google.com/group/nhusers?hl=en. >> > > > > -- > Fabio Maulo > > -- > You received this message because you are subscribed to the Google Groups > "nhusers" group. > To post to this group, send email to [email protected]. > To unsubscribe from this group, send email to > [email protected]<nhusers%[email protected]> > . > For more options, visit this group at > http://groups.google.com/group/nhusers?hl=en. > -- You received this message because you are subscribed to the Google Groups "nhusers" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/nhusers?hl=en.
