Quote:
Originally Posted by jraffa
that answer says to search in google
maybe I can phrase my concerns better
The link to ereader-palaca.com contains the md5. So any link I could find on google
My concern is if the file had been tampered with and so also the md5 in that site is "tampered"
"tampered with" means for e.g. insert a virus
so i would need the "original" md5 or a confirmation that the md5 in that site is the original one
I don't know if I have expressed my concerns right and I am just paranoic
well of course the kindle won't contain sensible informations worth to be stolen anyway
|
The md5 files are provided for troubleshooting an image that will not load.
The image files themselves and the individual components are each checksummed and the checksums are each cryptographicly signed by Amazon's private key.
The Kindle updater does check the signatures.
(If it didn't, then none of this nonsense to get our key onto the device would be required.)
But the point is well taken -
If a site does not include the md5sum files, then it is unlikely that they tested the copies of the images they are posting.
I'll mark the *.md5 files public.
But the 剽窃 without credit and failure to observe the terms of the open source licenses that require the modified sources to be published will no longer be tolerated by myself (at least, I can't speak for anyone else or this site).