burn problem

Asked by Alex

I have downloaded Ubuntu studio from 3 different sources
and all produce the same hash code - 3f17b4cc73ab315e4f9d1be675a8f7b0.
This code does not correspond to any code on the hash page.
Regards
Alex

Question information

Language:
English Edit question
Status:
Answered
For:
Ubuntu Studio Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
Hanusz leszek (leszek-skynet) said :
#1

It seems this hash is present on internet but apparently not on trusted sites:
http://www.google.be/search?hl=en&q=3f17b4cc73ab315e4f9d1be675a8f7b0

I didn't find a hash page for ubuntu studio.
What is this hash page you are talking about ?

Revision history for this message
Alex (alex-hayes) said :
#2

Here is the hash page on ubuntu
https://help.ubuntu.com/community/UbuntuHashes

Revision history for this message
Hanusz leszek (leszek-skynet) said :
#3

You probably should file a bug report to request the ubuntu studio hashes on this page:
https://launchpad.net/ubuntu-website/+bugs

Revision history for this message
Troy James Sobotka (troy-sobotka) said :
#4

If it isn't an official md5sum, you take your are taking your own chances.

It is _not_ a bug -- those hashes aren't maintained by the people who created the disks. Again, via the torrent or otherwise, you should compare your ISOs to officially published md5sums.

For example, on the official mirrors page, you can link to:
http://ruslug.rutgers.edu/downloads/ubuntustudio/

and find an offically published md5sum.

There is _NO_ point in publishing an md5sum on a target that can be changed such as a wiki. A malicious individual would simply change the md5sum to look valid.

Revision history for this message
Hanusz leszek (leszek-skynet) said :
#5

hmm this is what I thought at first but this portion of the wiki is not editable so it is secure.

On the contrary there is no point to download the md5sum in the same place that you download the iso because you only need one server compromised to create a security risk.

Revision history for this message
Troy James Sobotka (troy-sobotka) said :
#6

True enough regarding a single source site, but if cross checked from a different mirror, it should be sufficient.

With regards to the wiki, the /community portion is editable. Above that namespace is not. From what I can see, the /community/UbuntuHashes is editable.

Was this helpful?

Sincerely,
TJS

Revision history for this message
Troy James Sobotka (troy-sobotka) said :
#7

I stand correct, the Ubuntu hashes page is immutable.

Sincerely,
TJS

Can you help with this problem?

Provide an answer of your own, or ask Alex for more information if necessary.

To post a message you must log in.