BLIND-HAMS Archives

For blind ham radio operators

BLIND-HAMS@LISTSERV.ICORS.ORG

Options: Use Forum View

Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
"Martin G. McCormick" <[log in to unmask]>
Reply To:
For blind ham radio operators <[log in to unmask]>
Date:
Tue, 23 Jun 2015 07:54:47 -0500
Content-Type:
text/plain
Parts/Attachments:
text/plain (89 lines)
The usual way to avoid getting the miscreant version of software
is by use of a MD5 checksum. This is a mathematical algorithm
that simply adds all the bytes in a file which produces some
arbitrary value that is unique as long as nothing is tampered
with in the file. I actually don't know the formula but most
computer operating systems come with a summing program for this
very purpose so you don't need to do anything but run the
program in the same way it was run to create the sum.

	If you are on a web site or ftp repository, you might see
files named adwcleaner.exe and adwcleaner.md5.

	The idea is that you download both files. Run your
checksum program on the suspect file and it should tell you
whether or not it matches. You can even run the checksum program
manually with the proper flags to get a MD5 sum and then compare
its output with the .sum file but I have seen ways to simply run
the checksum program and give it the name of both the suspect
file and the sum file and it will do the match for you.

	The little voices in my head, however, are telling me to
remind you and others that there are ways to finagle the
checksum. One way is to mess with your resolver so that you go
to a dodgy DNS for your lookup. You end up going to the bad
guy's site where he's got a sum file based on the hacked version
and, of course, it fits just fine. Ah, those voices in one's
head. They really are out to get us.

	Generally speaking, the MD5 checksum is a time-honored
test of a file's veracity if you exercise caution to make sure
you know where you are going and your computer has not been
compromised.

	Those of you who run windows can get various utilities
for checking and creating MD5 sums. One such program can be had
from the Microsoft web site. Here is a snippet from the link.
Don't let the unsupported word scare you. It looks to me like it
is probably a public domain program that Microsoft gives you
because it is known to work properly.

Download Microsoft File Checksum Integrity Verifier from Official ... (p4 of 13)
   Windows

Microsoft File Checksum Integrity Verifier

   Language:
   English
   Download
   Download
   Close
   The Microsoft File Checksum Integrity Verifier tool is an unsupported
   command line utility that computes MD5 or SHA1 cryptographic hashes for
   files.
     * Details
       Version:
       1.0
       File Name:
       Windows-KB841290-x86-ENU.exe
       Date Published:
       8/22/2012
       File Size:
       117 KB

End of snippet.

Tools like this are good to have around for just the very reason
you are asking about. I also saw a winmd5 freeware checker so
you should be able to find something useful to you.

73
Martin WB5AGZ

"Dr. Ronald E. Milliman" writes:
> I was going to find a copy of AdwCleaner, download it and run it, but 
> then,
> I saw this warning:
> 
> 
> 
> scammers have a fake version of the reputable AdwCleaner tool, which ...
> 
> 
> 
> So, I am asking you where can I go to download AdwCleaner and know it is 
> the
> legit version and feel reasonably safe?
> 
> Ron, K8HSY

ATOM RSS1 RSS2