I think this offline hash solution already exists because the US government tracks hashes for most files for use in forensics work to exclude known files and thin the haystack.
http://www.nsrl.nist.gov/ On Aug 27, 2012 5:49 PM, "Thane Sherrington" < [email protected]> wrote: > At 04:57 PM 27/08/2012, Greg Sevart wrote: > >> I guess I wish they would do it offline - download a copy of a signed, >> compressed "baddies" file and let the local system compare the hashes. >> Treat >> it like AV signatures. I like the idea, but hate the implementation. >> > > Yeah, that's a much better idea. > > T > >
