Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #164545

Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System

From "Thomas Schmitt" <scdbackup@gmx.net>
Newsgroups linux.debian.user
Subject Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System
Date 2016-02-23 13:10 +0100
Message-ID <r5jWW-5br-27@gated-at.bofh.it> (permalink)
References <r5j0S-4sa-25@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw

Hi,

i wrote:
> > The ISO checksums are provided more for transport verification than
> > for the fight against intentional mainpulation.

Nicolas George wrote:
> If that were true, CRC32 would be enough.

For detecting most glitches, yes.
But not if we want to use it for identifying files in benevolent
environments.

The birthday paradox predicts that CRC32 will produce the first
collision after square root of 32 bit, i.e. 16 bit = 65536 tries.

MD5 gets square rooted to 64 bit, which gives a collision roughly
the same probability as that a 10 km asteroid hits you (not me)
directly within a day. Assumed that such a thing happens every
100 million years.

(And well, who would respect a person that divides polynomials on
a Galois field.)


> Signing hashes will get you a spanking from any cryptographer.

I sign my release tarballs by a gpg command which i really don't
understand, except that Karl Berry of FSF teached me to use it for
GNU uploads.
(How many bits worth is Karl's reputation and my illusion that it
was him who wrote to me ?)


I wonder whether there are performance reasons why only the hashs
of Debian ISOs are PGP signed.


Have a nice day :)

Thomas

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

 Warning �~@~T Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System) Karen Lewellen <klewellen@shellworld.net> - 2016-02-22 19:10 +0100
  Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System "Thomas Schmitt" <scdbackup@gmx.net> - 2016-02-22 20:30 +0100
    Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored  Operating System Karen Lewellen <klewellen@shellworld.net> - 2016-02-22 20:40 +0100
      Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System "Thomas Schmitt" <scdbackup@gmx.net> - 2016-02-22 21:00 +0100
        Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Charlie Kravetz <cjk@teamcharliesangels.com> - 2016-02-22 22:00 +0100
        Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Stuart Longland <stuartl@longlandclan.id.au> - 2016-02-25 03:40 +0100
    Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Dalios <dalios@eumx.net> - 2016-02-22 23:00 +0100
      Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System "Thomas Schmitt" <scdbackup@gmx.net> - 2016-02-22 23:20 +0100
        Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System Sven Hartge <sven@svenhartge.de> - 2016-02-22 23:40 +0100
          Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System "Thomas Schmitt" <scdbackup@gmx.net> - 2016-02-23 00:00 +0100
            Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2016-02-24 10:30 +0100
              Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System "Thomas Schmitt" <scdbackup@gmx.net> - 2016-02-24 13:50 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System <tomas@tuxteam.de> - 2016-02-24 14:10 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2016-02-24 14:20 +0100
                OT: ownership of Mega.co.nz (was Re: Warning Linux Mint Website  Hacked and ISOs replaced with Backdoored Operating System) Jonathan Dowland <jmtd@debian.org> - 2016-02-24 15:00 +0100
    Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Gener Badenas <gener.ong.badenas@gmail.com> - 2016-02-23 02:40 +0100
      Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System Glenn English <ghe@srv.slsware.net> - 2016-02-23 05:20 +0100
      Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System "Thomas Schmitt" <scdbackup@gmx.net> - 2016-02-23 08:10 +0100
      Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Darac Marjal <mailinglist@darac.org.uk> - 2016-02-23 11:00 +0100
        Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Nicolas George <george@nsup.org> - 2016-02-23 11:30 +0100
          Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System "Thomas Schmitt" <scdbackup@gmx.net> - 2016-02-23 12:10 +0100
            Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Nicolas George <george@nsup.org> - 2016-02-23 12:10 +0100
              Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System "Thomas Schmitt" <scdbackup@gmx.net> - 2016-02-23 13:10 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Nicolas George <george@nsup.org> - 2016-02-23 13:20 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System David Wright <deblis@lionunicorn.co.uk> - 2016-02-23 16:00 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Nicolas George <george@nsup.org> - 2016-02-23 16:10 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System David Wright <deblis@lionunicorn.co.uk> - 2016-02-23 17:00 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Nicolas George <george@nsup.org> - 2016-02-23 17:00 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System arian <debian@semioptimal.net> - 2016-02-23 17:50 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System arian <debian@semioptimal.net> - 2016-02-23 17:50 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Nicolas George <george@nsup.org> - 2016-02-23 18:00 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System arian <debian@semioptimal.net> - 2016-02-23 18:10 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System David Wright <deblis@lionunicorn.co.uk> - 2016-02-23 21:00 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Nicolas George <george@nsup.org> - 2016-02-24 11:00 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System David Wright <deblis@lionunicorn.co.uk> - 2016-02-27 06:30 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Henrique de Moraes Holschuh <hmh@debian.org> - 2016-02-25 15:00 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System Stefan Monnier <monnier@iro.umontreal.ca> - 2016-02-25 15:10 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System Stefan Monnier <monnier@iro.umontreal.ca> - 2016-02-25 15:20 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Christian Seiler <christian@iwakd.de> - 2016-02-25 16:20 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System "Thomas Schmitt" <scdbackup@gmx.net> - 2016-02-25 21:10 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System "Thomas Schmitt" <scdbackup@gmx.net> - 2016-02-23 16:40 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Nicolas George <george@nsup.org> - 2016-02-23 17:00 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System "Thomas Schmitt" <scdbackup@gmx.net> - 2016-02-23 17:50 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Nicolas George <george@nsup.org> - 2016-02-23 18:40 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Christian Seiler <christian@iwakd.de> - 2016-02-23 19:20 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Nicolas George <george@nsup.org> - 2016-02-23 20:00 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Christian Seiler <christian@iwakd.de> - 2016-02-23 20:40 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Nicolas George <george@nsup.org> - 2016-02-24 11:00 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Christian Seiler <christian@iwakd.de> - 2016-02-24 12:40 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Nicolas George <george@nsup.org> - 2016-02-24 13:50 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Christian Seiler <christian@iwakd.de> - 2016-02-24 15:30 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Richard Hector <richard@walnut.gen.nz> - 2016-02-24 10:50 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Nicolas George <george@nsup.org> - 2016-02-24 11:00 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Richard Hector <richard@walnut.gen.nz> - 2016-02-24 11:10 +0100
              Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Seeker <seeker5528@comcast.net> - 2016-02-23 17:30 +0100
                Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Nicolas George <george@nsup.org> - 2016-02-23 17:40 +0100
            Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System jdd <jdd@dodin.org> - 2016-02-23 12:10 +0100
            Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System "Thomas Schmitt" <scdbackup@gmx.net> - 2016-02-23 12:40 +0100
              Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Nicolas George <george@nsup.org> - 2016-02-23 13:30 +0100
            Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System "Andrew M.A. Cater" <amacater@galactic.demon.co.uk> - 2016-02-23 13:00 +0100
            Re: Warning Linux Mint Website Hacked and ISOs replaced with  Backdoored Operating System Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2016-02-24 10:40 +0100
        Re: Warning Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System "Thomas Schmitt" <scdbackup@gmx.net> - 2016-02-23 11:50 +0100

csiph-web