full-disclosure - apache.org files are infected?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Fri Jul 22 18:06:13 2005
From: ahaning at gmail.com (Andrew Haninger)
Subject: apache.org files are infected?

On 7/22/05, Larry Seltzer <larry@...ryseltzer.com> wrote:
> >>The apr-1.0.1.tar.gz.md5 that I downloaded looks like:
> >>apr-1.0.1.tar.gz: 0A 3C B9 11 EA 18 23 CF  A3 E5 86 38 92 77 47 05
> >>which is odd. And then,
> Why is this odd?
I've always only seen md5sums as long strings of letters and numbers.
I'm actually just now realizing that maybe they're really just a bunch
of hex pairs (?). It didn't look like a normal md5sum output to me
before, but now that I look at it closer, they are identical strings
of characters, but the strings themselves are not identical. md5sum -c
<file> on Linux did not work in this case.

> >>md5sum apr-1.0.1.tar.gz
> >>0a3cb911ea1823cfa3e5863892774705  apr-1.0.1.tar.gz
> They look identical to me
What are you using to look at them?

Thanks.

-Andy