I think there is checksums only for base system, without X, source, ports, packages, etc....
Or, I don't know where they find.

Open Phugu wrote:
On 5/2/07, Mike Erdely <[EMAIL PROTECTED]> wrote:
On Wed, May 02, 2007 at 08:07:10PM -0400, Clint M. Sand wrote:
> On Tue, May 01, 2007 at 02:33:50PM -0700, andrew fresh wrote:
> > http://openbsd.somedomain.net/index.php?version=4.1
> Just out of curiosity...
>
> Is it logical to use an OS for the intense focus on security and
> correctness, yet download the binaries from a random person on a mailing
> list instead of any official source with reasonable file integrity
> checking process in place?
>
> Seems odd that people would use OpenBSD because they trust the code, yet
> download the binaries from random torrents on the internet.

man 1 cksum
ftp://ftp5.usa.openbsd.org/pub/OpenBSD/4.1/i386/CKSUM
Seems odd that people would use OpenBSD because they trust the code, yet
use a CRC32 to verify the integrity of said operating system.
Speaking of this, when will the OpenBSD project begin to post SHA256 hashes
to the ftp sites. MD5 is dead: these two files are different and yet
have the same
MD5 hash.
http://www.cits.rub.de/imperia/md/content/magnus/letter_of_rec.ps
http://www.cits.rub.de/imperia/md/content/magnus/order.ps

Reply via email to