Hello, a friend of mine recently bought some Debian woody CDs. Because the CDs do not look very official she wants to verify that these are really Debian CDs and not something trojanized.
I suggested to her to compare the output of
md5sum /dev/cdrom
with the corresponding values from
http://cdimage.debian.org/jigdo-area/current/jigdo/i386/MD5SUMS
Is this a good way to check wheter the CDs are official
Debian CDs?
The result was that the checksums did match for CD #1, but
did NOT match for the remaining CDs. When she asked the
dealer he told her, that this does not indicate a problem,
but could be caused by "additional bits at the beginning or
end of the CD". Does this make sense?
Jochen
--
Omm
(0)-(0)
http://www.mathematik.uni-kl.de/~wwwstoch/voss/privat.html
pgpEC6Zb8tGaT.pgp
Description: PGP signature
