View Single Post
Old 10-10-2017, 01:37 PM   #2673
knc1
Going Viral
knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.
 
knc1's Avatar
 
Posts: 17,212
Karma: 18210809
Join Date: Feb 2012
Location: Central Texas
Device: No K1, PW2, KV, KOA
Quote:
Originally Posted by jraffa View Post
that answer says to search in google

maybe I can phrase my concerns better

The link to ereader-palaca.com contains the md5. So any link I could find on google

My concern is if the file had been tampered with and so also the md5 in that site is "tampered"
"tampered with" means for e.g. insert a virus

so i would need the "original" md5 or a confirmation that the md5 in that site is the original one

I don't know if I have expressed my concerns right and I am just paranoic

well of course the kindle won't contain sensible informations worth to be stolen anyway
The md5 files are provided for troubleshooting an image that will not load.
The image files themselves and the individual components are each checksummed and the checksums are each cryptographicly signed by Amazon's private key.
The Kindle updater does check the signatures.
(If it didn't, then none of this nonsense to get our key onto the device would be required.)

But the point is well taken -
If a site does not include the md5sum files, then it is unlikely that they tested the copies of the images they are posting.

I'll mark the *.md5 files public.

But the 剽窃 without credit and failure to observe the terms of the open source licenses that require the modified sources to be published will no longer be tolerated by myself (at least, I can't speak for anyone else or this site).
knc1 is offline   Reply With Quote