Pascal & other security knowledgible persons,
Thanks for your advice on how to deal with this problem. Below are my two 
attempts, along with their failed results.
Attempt 01
$ ls
debian-8.5.0-i386-lxde-CD-1.checksum SHA512SUMS
debian-8.5.0-i386-lxde-CD-1.iso SHA512SUMS.sign
Debian8_i386_SHA256SUMS.sign
$ wget https://people.debian.org/~danchev/debian-iso/check_debian_iso
~/scripts$ chmod +x check_debian_iso
$ /home/a/scripts/check_debian_iso SHA512SUMS debian-8.5.0-i386-lxde-CD-1.iso 
/dev/sdb
Does not look like an ISO 9660 filesystem: '/dev/sdb' magic=' '
{fail}

Am I supposed to edit the script and put something in for magic=' '?

Attempt 02
$ sudo cmp 
/media/LG/AC/bckup/Install/2_Bootable-OS/Debian/i386/debian-8.5.0-i386-lxde-CD-1.iso
 /dev/sdb
[sudo] password for a:
/media/LG/AC/bckup/Install/2_Bootable-OS/Debian/i386/debian-8.5.0-i386-lxde-CD-1.iso
 /dev/sdb differ: byte 1, line 1


Sincerely,
Andrew F Comly

==================================================================================


-------- Original Message --------
Subject: Re: you iso's may have been hacked
Local Time: August 10, 2016 10:17 AM
UTC Time: August 10, 2016 10:17 AM
From: pas...@plouf.fr.eu.org
To: debian-user@lists.debian.org

Le 10/08/2016 à 08:36, Thomas Schmitt a écrit :
>
> Andrew F Comly wrote:
>
>> Notice how the two sha512sum numbers (local vs burnt usb) don't match!

Of course : the image and the device do not have the same size.

> Determine the ISO size on /dev/sdb by program isosize and curb its reading
> by help of program dd, or try
>
> wget https://people.debian.org/~danchev/debian-iso/check_debian_iso
>
> ./check_debian_iso SHA512SUMS debian-8.5.0-i386-lxde-CD-1.iso /dev/sdb

Or use 'cmp' to compare the USB device contents with the image file.

cmp debian-8.5.0-i386-lxde-CD-1.iso /dev/sdb

If the comparison ends by reaching the end of the image file, there is
no difference.

Reply via email to