Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > alt.comp.software.thunderbird > #21277

Re: Bogus Mozilla FTP server websites?

From Lawrence D’Oliveiro <ldo@nz.invalid>
Newsgroups alt.comp.software.thunderbird, alt.comp.software.firefox
Subject Re: Bogus Mozilla FTP server websites?
Date 2026-07-05 21:51 +0000
Organization A noiseless patient Spider
Message-ID <112ejkd$1f8li$2@dont-email.me> (permalink)
References (2 earlier) <1quchmcpwcmus$.v9xssl3i30q7$.dlg@40tude.net> <1129vsp$3scqc$1@dont-email.me> <hhzn00regstc$.pudh8q8slgc8$.dlg@40tude.net> <112c46p$k25o$1@dont-email.me> <3q8xv0n9craj$.1swzte2g0mj1j.dlg@40tude.net>

Cross-posted to 2 groups.

Show all headers | View raw

On Sun, 5 Jul 2026 21:54:16 +0700, JJ wrote:

> On Sat, 4 Jul 2026 23:15:37 -0000 (UTC), Lawrence D’Oliveiro wrote:
>>
>> The actual download does not matter, just as long as you get the
>> verification hashes from a trusted source.
>
> Except that, if from a bogus server, you can get a hash which is
> generated from a fake or an already compromised download.

So, don’t get the hash from a mirror server, get it from a trusted
source.

> The download is not the only one which can be modified.

It is the big one, that puts a significant load on the server you’re
getting it from. Which is why we have mirrors.

A SHA-256 hash, on the other hand, is just a 64-character hex string.

Back to alt.comp.software.thunderbird | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Bogus Mozilla FTP server websites? "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-06-30 18:09 +0800
  Re: Bogus Mozilla FTP server websites? aer <aer@no-email.xxx.invalid> - 2026-07-03 08:44 -0400
    Re: Bogus Mozilla FTP server websites? "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-07-03 20:51 +0800
    Re: Bogus Mozilla FTP server websites? "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-07-03 20:51 +0800
    Re: Bogus Mozilla FTP server websites? JJ <jj4public@gmail.com> - 2026-07-03 22:06 +0700
      Re: Bogus Mozilla FTP server websites? "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-07-04 00:04 +0800
        Re: Bogus Mozilla FTP server websites? "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-07-04 00:07 +0800
        Re: Bogus Mozilla FTP server websites? Daniel70 <daniel47@nomail.afraid.org> - 2026-07-04 23:05 +1000
          Re: Bogus Mozilla FTP server websites? "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-07-04 21:40 +0800
      Re: Bogus Mozilla FTP server websites? "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-07-04 00:08 +0800
      Re: Bogus Mozilla FTP server websites? Lawrence D’Oliveiro <ldo@nz.invalid> - 2026-07-04 03:49 +0000
        Re: Bogus Mozilla FTP server websites? JJ <jj4public@gmail.com> - 2026-07-04 22:57 +0700
          Re: Bogus Mozilla FTP server websites? Lawrence D’Oliveiro <ldo@nz.invalid> - 2026-07-04 23:15 +0000
            Re: Bogus Mozilla FTP server websites? JJ <jj4public@gmail.com> - 2026-07-05 21:54 +0700
              Re: Bogus Mozilla FTP server websites? "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-07-05 22:57 +0800
                Re: Bogus Mozilla FTP server websites? "Carlos E. R." <robin_listas@es.invalid> - 2026-07-05 19:57 +0200
              Re: Bogus Mozilla FTP server websites? "Carlos E. R." <robin_listas@es.invalid> - 2026-07-05 19:58 +0200
              Re: Bogus Mozilla FTP server websites? Lawrence D’Oliveiro <ldo@nz.invalid> - 2026-07-05 21:51 +0000
    Re: Bogus Mozilla FTP server websites? "Carlos E. R." <robin_listas@es.invalid> - 2026-07-03 22:50 +0200
      Re: Bogus Mozilla FTP server websites? FTP? HTTPS? "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-07-04 12:27 +0800
    Re: Bogus Mozilla FTP server websites? Mozilla Products <invalid@invalid.invalid> - 2026-07-04 00:05 +0100
      Re: Bogus Mozilla FTP server websites? "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-07-04 12:00 +0800
    Re: Bogus Mozilla FTP server websites? John Smith <invalid@invalid.invalid> - 2026-07-04 23:01 +0100
      Re: Bogus Mozilla FTP server websites? Mirror? Shadow? "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-07-05 13:08 +0800
        Re: Bogus Mozilla FTP server websites? Mirror? Shadow? Paul <nospam@needed.invalid> - 2026-07-05 03:12 -0400
        Re: Bogus Mozilla FTP server websites? Mirror? Shadow? Shadow <Sh@dowbr.invalid> - 2026-07-05 16:27 -0300
          Re: Bogus Mozilla ... Usenet spam and noise "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-07-06 09:59 +0800

csiph-web