On Friday 06 April 2007, G.T.Smith wrote:
> Checksums as it has been already pointed out provide no security, only
> a  guarantee of the integrity of the source files, and as such are
> essential for technologies such as bittorrent to work. However, checksum
> + datasource checks can be gimmicked (though in the instance of
> bittorrent such gimmickry is unlikely to work).

So which is it Graham ?
You seem to want to come down simultaneously on every side of the issue.

If you cut/paste your checksums from the web page and they match
the bittorrent downloaded ISO, it proves that all of the contributing
servers from which your bittorrent was served, were secure enough for the job 
at hand within the accuracy of the checkum methodology.

Each packet (or what ever the data block is called) is check summed in the 
bittorrent client, and the whole iso can (and should) be checked.

There is virtually no opportunity to insert a rogue data block (with
a virus) that was not on the original iso and get away with it. 

-- 
_____________________________________
John Andersen
--
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to