Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > alt.comp.software.thunderbird > #21273

Re: Bogus Mozilla FTP server websites?

From "Carlos E. R." <robin_listas@es.invalid>
Newsgroups alt.comp.software.thunderbird, alt.comp.software.firefox
Subject Re: Bogus Mozilla FTP server websites?
Date 2026-07-05 19:58 +0200
Message-ID <navkaeFgthuU5@mid.individual.net> (permalink)
References (2 earlier) <1quchmcpwcmus$.v9xssl3i30q7$.dlg@40tude.net> <1129vsp$3scqc$1@dont-email.me> <hhzn00regstc$.pudh8q8slgc8$.dlg@40tude.net> <112c46p$k25o$1@dont-email.me> <3q8xv0n9craj$.1swzte2g0mj1j.dlg@40tude.net>

Cross-posted to 2 groups.

Show all headers | View raw

On 2026-07-05 16:54, JJ wrote:
> On Sat, 4 Jul 2026 23:15:37 -0000 (UTC), Lawrence D’Oliveiro wrote:
>> On Sat, 4 Jul 2026 22:57:48 +0700, JJ wrote:
>>
>>> On Sat, 4 Jul 2026 03:49:45 -0000 (UTC), Lawrence D’Oliveiro wrote:
>>>>
>>>> On Fri, 3 Jul 2026 22:06:28 +0700, JJ wrote:
>>>>
>>>>> Is there really bogus Mozilla FTP server which is not obvious?
>>>>
>>>> Does it matter?
>>>>
>>>> Wherever you get it from, just verify the hash against a list like
>>>> this:
>>>> <https://ftp.mozilla.org/pub/firefox/releases/77.0b9/SHA256SUMS>
>>>
>>> You're pointing to an official server. Not bogus server.
>>
>> Precisely.
>>
>>> So, yes. It does matter.
>>
>> The actual download does not matter, just as long as you get the
>> verification hashes from a trusted source.
> 
> Except that, if from a bogus server, you can get a hash which is generated
> from a fake or an already compromised download.
> 
> The download is not the only one which can be modified.

Just read the hash from the true site, then download from anywhere and 
check the hash. If it matches, the file is good.


-- 
Cheers,
        Carlos E.R.
        ES🇪🇸, EU🇪🇺;

Back to alt.comp.software.thunderbird | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Bogus Mozilla FTP server websites? "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-06-30 18:09 +0800
  Re: Bogus Mozilla FTP server websites? aer <aer@no-email.xxx.invalid> - 2026-07-03 08:44 -0400
    Re: Bogus Mozilla FTP server websites? "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-07-03 20:51 +0800
    Re: Bogus Mozilla FTP server websites? "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-07-03 20:51 +0800
    Re: Bogus Mozilla FTP server websites? JJ <jj4public@gmail.com> - 2026-07-03 22:06 +0700
      Re: Bogus Mozilla FTP server websites? "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-07-04 00:04 +0800
        Re: Bogus Mozilla FTP server websites? "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-07-04 00:07 +0800
        Re: Bogus Mozilla FTP server websites? Daniel70 <daniel47@nomail.afraid.org> - 2026-07-04 23:05 +1000
          Re: Bogus Mozilla FTP server websites? "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-07-04 21:40 +0800
      Re: Bogus Mozilla FTP server websites? "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-07-04 00:08 +0800
      Re: Bogus Mozilla FTP server websites? Lawrence D’Oliveiro <ldo@nz.invalid> - 2026-07-04 03:49 +0000
        Re: Bogus Mozilla FTP server websites? JJ <jj4public@gmail.com> - 2026-07-04 22:57 +0700
          Re: Bogus Mozilla FTP server websites? Lawrence D’Oliveiro <ldo@nz.invalid> - 2026-07-04 23:15 +0000
            Re: Bogus Mozilla FTP server websites? JJ <jj4public@gmail.com> - 2026-07-05 21:54 +0700
              Re: Bogus Mozilla FTP server websites? "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-07-05 22:57 +0800
                Re: Bogus Mozilla FTP server websites? "Carlos E. R." <robin_listas@es.invalid> - 2026-07-05 19:57 +0200
              Re: Bogus Mozilla FTP server websites? "Carlos E. R." <robin_listas@es.invalid> - 2026-07-05 19:58 +0200
              Re: Bogus Mozilla FTP server websites? Lawrence D’Oliveiro <ldo@nz.invalid> - 2026-07-05 21:51 +0000
    Re: Bogus Mozilla FTP server websites? "Carlos E. R." <robin_listas@es.invalid> - 2026-07-03 22:50 +0200
      Re: Bogus Mozilla FTP server websites? FTP? HTTPS? "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-07-04 12:27 +0800
    Re: Bogus Mozilla FTP server websites? Mozilla Products <invalid@invalid.invalid> - 2026-07-04 00:05 +0100
      Re: Bogus Mozilla FTP server websites? "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-07-04 12:00 +0800
    Re: Bogus Mozilla FTP server websites? John Smith <invalid@invalid.invalid> - 2026-07-04 23:01 +0100
      Re: Bogus Mozilla FTP server websites? Mirror? Shadow? "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-07-05 13:08 +0800
        Re: Bogus Mozilla FTP server websites? Mirror? Shadow? Paul <nospam@needed.invalid> - 2026-07-05 03:12 -0400
        Re: Bogus Mozilla FTP server websites? Mirror? Shadow? Shadow <Sh@dowbr.invalid> - 2026-07-05 16:27 -0300
          Re: Bogus Mozilla ... Usenet spam and noise "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-07-06 09:59 +0800

csiph-web