md5sum for download files

Ideas for improvements and requests for new features in XnView Classic

Moderators: XnTriq, xnview

Post Reply
User avatar
klapperstorch
Posts: 49
Joined: Fri Jan 26, 2007 8:43 am

md5sum for download files

Post by klapperstorch » Tue Sep 09, 2008 9:30 pm

a list of md5sums of the download files would be nice for checking of correct and untampered download.

User avatar
DOS386
Posts: 291
Joined: Sun Jun 11, 2006 2:43 pm

Re: MD5

Post by DOS386 » Tue Sep 16, 2008 12:38 am

klapperstorch wrote:list of md5
Right :-)
There is indeed no WinZIP under my rock.

User avatar
RGBA
Posts: 45
Joined: Fri Jul 18, 2008 10:41 am

Post by RGBA » Tue Sep 16, 2008 12:31 pm

I guess he was talking about something like this.

A16DD03FAC3A3296CE8B98E3ADF92110 - GflAxLightSetup.exe
36710F0887B6C6F2B898FD879E4AEEF2 - GflAxLight-win.zip
2F63AB117C88EE27DBD811A6ACDA8B80 - GflAxSetup.exe
6C9659179015B090BB6857934F1B71D1 - GflAx-win.zip
D7AE9874827F19D2940F65745FD15F40 - GflSDK-BeOS-x86.tar.gz
5B7C8F6CCC40D2210FA7F403CD96A1F1 - GflSDK-FreeBSD5-x86.tgz
51B316E9B5D089B9C0575D8F21D92EE8 - GflSDK-Irix-mips.tgz
A5A848E623D74A9397B64C63267A22BE - GflSDK-Linux64-x86.tgz
125DCF22D4540A7317803A557B6F5882 - GflSDK-Linux-x86.tgz
642CEE77822AA8A7774D7D49C4626381 - GflSDK-Linux-x86-gcc3.rpm
FBE6648DF335AE05471A83B34304A23A - GflSDK-Linux-x86-gcc3.tgz
A9D03EBC640D2AE34F8428E717131A46 - GflSDK-MacOSX.tgz
8D1A4DF6B64914DD764DF5E3A700B4F4 - GflSDKSetup.exe
5AEE36A289A1C9D186484459DF97C87E - GflSDK-Solaris-sparc.tgz
BC9B9F4F43DC1F51F87B32CF3C5EC1CA - GflSDK-win.zip
25B089ECF38D34316056ED3BF50B1109 - NConvert-64-unknown-linux2.x.tgz
80966E3CDAF453C60D2F52CBD2869C2B - Nconvert-BeOs.zip
B39FF1A610FE696CA648E84153E04653 - NConvert-dos.zip
4AE0CBC912E33247EA0A16A3089403E9 - NConvert-macosx.tgz
E6221FC2EC9298A36F1FE108E0A58CA2 - NConvert-os2.zip
6EEF8434BFAF88F6103B61A7376CFC05 - Nconvert-win.zip
19F2D035D0FE451BABD630113EA03160 - Nconvert-win64.zip
972A7D960C64D8F94E6257CFF5E45457 - NConvert-x86-unknown-FreeBSD4.x.tgz
D186D05BBC19CA3362E8D30DE010533D - NConvert-x86-unknown-FreeBSD6.x.tgz
1FB98D1B62A58956C766A6EDD0BD686D - NConvert-x86-unknown-linux2.x.tgz
EE735AD6D87D9F40ABBA2BD3AD192866 - PhotoMasque.zip
54BCEBCA4E6F42439C5320960A08482F - PluginsSDK-win.zip
0DB76ABC6EA64D0BAA60FAB6C78912F5 - xnpocket_arm.cab
D87A76A9F0A340669B07C6D2DD2B310D - xnpocket_arm.exe
A68F66FA074B28F8162ED438396C9E53 - xnpocket_arm_fr.cab
DBE7AA279C53F13C765D0CA4BB42A4C2 - xnpocket_arm_fr.exe
3AF98F7643F843B6823640D3D5CAC477 - xnpocket_mips.cab
671FC3BEECC9C144B19AA1001883A13B - xnpocket_mips.exe
8C5F227599FB1E9473AFCFA1B0B38F94 - xnpocket_mips_fr.cab
F01AB04BA1C3C5E36E94F98581FDE209 - xnpocket_mips_fr.exe
E2BDBA1C51BAE47564028F49BC5B822C - xnpocket_sh3.cab
06FDF7CFD80954A0092FA7BDD4CA368E - xnpocket_sh3.exe
D84244F3F22AB951A4A0065581A75B1A - xnpocket_sh3_fr.cab
E84F1DEB3D8D63800BAB7789DEC94464 - xnpocket_sh3_fr.exe
DB0E790AF47B962E0ABC8ECCF8F5D668 - xnpocket_xscale.cab
17AACBC4AD1EEF5F825198FFCABB629C - xnpocket_xscale.exe
084F70F084F451A5690ACEE8563D3068 - xnpocket_xscale_fr.cab
AEA4BB5F135C985EF7D8C2B2D96DE58F - xnpocket_xscale_fr.exe
66BA2836D3408D96BD46C5F0FCC1C177 - XnShellEx.exe
903294B67A13928983FEB4243B99D0E3 - XnShellEx.zip
0D5009CEDD81932DD9480E2795513339 - XnShellEx64.exe
6F1A7BB747E4796A7BF9ACC508CACBB4 - XnShellEx64.zip
A44C21D68C9610AD4A3659988982B55A - XnSmartphone.cab
45CF103971642C4ECA5E9A64EB702EF7 - XnSmartphone2003.cab
2289813DB7CDEC44ED39444D18DC379C - XnView U3.exe
9AAFD2B8A8FC39FC2CF416A54D82BC84 - XnView.i386.rpm
F81541DC6C62DEC78CE1EC5BB82BDA79 - XnView.u3p
1F86E5E97F11D62736BD865A1705A8B0 - XnView-app-macosx-10.4.tgz
CF699A13DFFE438528A4EA1F504DA9CA - XnView-hppa-hp-hpux11.x.tgz
41DB880E9E70C4E2F9420BEFBB9A08BF - XnView-macosx.zip
46FC20CE3EEAC88F7CB00E6569006ABD - XnView-macosx-10.4.tgz
1BC5FF29C3297C5D0D27428213E5E293 - XnViewMediaDetector.zip
33446FEFE6FAD859129B7F09289FB1B1 - XnView-mips-sgi-irix5.tardist
5F4732C60095A5663E31354FFEB1DFA4 - XnView-mips-sgi-irix5.x.tgz
1D914981C0390886F3FA4531DC1B420B - XnView-mips-sgi-irix6.tardist
135C06BD04EAC07F7F2CFE7F72DC8CF5 - XnView-mips-sgi-irix6.x.tgz
9BC2A4BBF4FFBE3C46728B5BCE71E00D - XnView-openmotif2.2.i386.rpm
5757AE09F90EAB926750814222F124C6 - XnView-powerpc-ibm-aix4.3.tgz
004D7C1ECD7DE7BA372AC3AAE6CDEDF9 - XnView-sparc-sun-solaris2.x.tgz
5748214C75111C31DA2F3DFF754B6E65 - XnView-static.i386.rpm
A38E5F562AF20D27FF8CF90CDCD08E38 - XnView-static-fc4.i386.rpm
E7393DDBE2E3D094E764CCCDE0942DAE - XnViewU3.exe
7218E603BFB1468AE1E5686692DD6FEC - Xnview-wfw.zip
86BEC5A3CFC48BC38741863F1F252B61 - XnView-win.exe
A4701C1DC1516FC43E9C51B8D40A20A7 - XnView-win.zip
EF002474740EBD552A0A9F8B35A675D8 - XnView-win-de.exe
B77562A39055BE6E209A6093D718DEF4 - XnView-win-en.exe
F4B5B0CD887664E081850A5465741E37 - XnView-win-fr.exe
82FE91FAFE2A6E987BC016E0304DA2D0 - XnView-win-full.exe
1B6BCEAE59AEABC9512C78EE7E4D2AE2 - XnView-win-full.zip
95460BF25D120786430A541E7E4A86A2 - XnView-win-full-de.exe
9A154A4D00337E3673276DC8CF0ACD72 - XnView-win-full-fr.exe
BCC038F560F8C0FE757E00E067E98747 - XnView-win-plugins.exe
BED710B652E99C897F194A3D12C176AD - XnView-win-plugins.zip
203009D579E1F94C0D66384BD75EF2BA - XnView-win-small.exe
BC2B99E661975B1B25F7A480DA93AA01 - XnView-win-small.zip
7B19DF7A2C5339AB6C84A33011CDAD64 - XnView-x86-unknown-FreeBSD4.x.tgz
75BD0F88A6918E7AD38617ECBE99EFB4 - XnView-x86-unknown-FreeBSD4.x-pkg.tgz
34C7C3F334EC6AF73B735266350003E3 - XnView-x86-unknown-FreeBSD4.x-pkg-static.tgz
44AF50CEFCB49E397FD02B74639B23E5 - XnView-x86-unknown-FreeBSD4.x-static.tgz
F0CD7EF36E88EA15695FD983D9CB7E2F - XnView-x86-unknown-FreeBSD5.x-pkg-static.tgz
A6CBB30E84970F7CE2331F0840663358 - XnView-x86-unknown-FreeBSD5.x-static.tgz
81C44A84F5183F67512EA8069548D185 - XnView-x86-unknown-linux2.x.tgz
9D10566B6CAAEE0D9AD9286A426E18A4 - XnView-x86-unknown-linux2.x-openmotif2.2.tgz
D3E05DA55E5881FF17A2C934257DB72F - XnView-x86-unknown-linux2.x-static.tgz
B5AB466EB572A6EA429A9C579644E582 - XnView-x86-unknown-linux2.x-static-fc4.tgz
C8C6F7012FD45FFABC2AF914C8D19CE3 - XnView-x86-unknown-NetBSD1.x-pkg-static.tgz
4EA5EAF56893B5D8AEC81BFA1952C738 - XnView-x86-unknown-NetBSD1.x-static.tgz
14984F721C041364C9789B50019FC0D0 - XnView-x86-unknown-OpenBSD3.x-pkg-static.tgz
AFCACED8CF750CC793264CE04969FEBE - XnView-x86-unknown-OpenBSD3.x-static.tgz
C4111F8F387768D2F29D9F7F5ED9104A - XnView-x86-unknown-solaris8.x.tgz
XnView 1.95.3 de | XP Prof. SP3

User avatar
klapperstorch
Posts: 49
Joined: Fri Jan 26, 2007 8:43 am

Post by klapperstorch » Sun Sep 21, 2008 6:51 pm

RGBA wrote:I guess he was talking about something like this.

A16DD03FAC3A3296CE8B98E3ADF92110 - GflAxLightSetup.exe
..... etc. .....
C4111F8F387768D2F29D9F7F5ED9104A - XnView-x86-unknown-solaris8.x.tgz
Is there a URL where I can ALWAYS find the md5sums of the actual distribution?

User avatar
RGBA
Posts: 45
Joined: Fri Jul 18, 2008 10:41 am

Post by RGBA » Sun Oct 19, 2008 12:23 pm

New sums only for the last updated files (v1.95 final):
; MD5 sums generated by FileCheckMD5 version 0.2.1.10

30f9c0f6ed06d9d2bbc9e4331942cade|Nconvert-win.zip
0d0d399542940078a5b109b64f23b262|Nconvert-win64.zip
f266950230a36556a90f4aa2234c89b1|XnShellEx.exe
ab0c2b46302b60f9a379fd5b7da6d189|XnShellEx.zip
55f53d5a2835e1bab57c68779ed9269c|XnShellEx64.exe
1ab2fc2ee443f00e0e2a22e443485897|XnShellEx64.zip
8d0e1c0db9645958b10013ed2670cc41|XnView-win-de.exe
5e2cd6ce967dda9eb64c907d5399edfd|XnView-win-en.exe
00dc3366ffc5ffe4112905430206eff4|XnView-win-fr.exe
3c34f61da8471514e6a7c5de49994252|XnView-win-full-de.exe
eeda0555e0281867a49b1c83ccfe6545|XnView-win-full-fr.exe
9afb5a10736db0c7a7a6770b3b021d19|XnView-win-full.exe
2b159813c308f6b28effa1b92a34f86b|XnView-win-full.zip
f296a256256633b6bb75af255b6fae32|XnView-win-plugins.exe
a444459d505824fb4539ccdbb48b3f6b|XnView-win-small.exe
2f0452dfef6ec6cba873a60833f167a3|XnView-win-small.zip
5ec9340db2fa046131f259d8af4b76db|XnView-win.exe
81c222999834a0e4ec64e9ca4cab0f01|XnView-win.zip
74c648f8dbb5bf30d5bc745bc00f9208|XnViewMP-linux-01.tgz
0777c04707e054143bea4b3a07aaeb0e|XnViewMP-mac-01.tgz
1427c1a1bfc571b4ff4cba5abcd9f963|XnViewMP-win-01.zip


P.S.: For missing files check the upper post.
XnView 1.95.3 de | XP Prof. SP3

User avatar
klapperstorch
Posts: 49
Joined: Fri Jan 26, 2007 8:43 am

Post by klapperstorch » Sun Oct 19, 2008 4:54 pm

Thank you. Please continue this service in future.
Suggestion: Make users aware of the MD5SUMs by a remark on the download page. The user may then save a pointer to this forum in his bookmarks for calling it when he needs it.
Warning: A direct link from the download page would not be a good idea because a faked download page could also link to a faked forum with faked md5sums.

klapperstorch

User avatar
RGBA
Posts: 45
Joined: Fri Jul 18, 2008 10:41 am

Post by RGBA » Mon Oct 20, 2008 10:43 am

The currently used files are only from
http://download.xnview.com/

But I understand your fear about faked files,
that why I'd already tested a few with several freeware hoster
like chip.de or other and they had the same hashes. :D

I'll see, if there is a chance for a better information.
XnView 1.95.3 de | XP Prof. SP3

User avatar
klapperstorch
Posts: 49
Joined: Fri Jan 26, 2007 8:43 am

Post by klapperstorch » Mon Oct 20, 2008 11:54 am

A one-time test of the files on different download sites is no guarantee that not in the next 5 minutes a link to a download site becomes a fake. I must be able to check myself after I have downloaded.
So, what is needed, is an independent information (independent from the download site) naming the place where I can find the md5sums.
And these md5sums must be generated by someone who has direct access to the original program files. A checksum, generated for a program file that has already been retrieved via the internet, is of no use, because this program might be infected already.

In fact: a PGP/GnuPG signature file would be even better than md5sum. It could be provided together with the program file on the download site. A hacker who usurps the download site is able to infect the program with a virus, but he cannot provide a valid GPG/GnuPG signature file for the program file because he does not have the private/secret key of the program author.

Regards, klapperstorch

User avatar
RGBA
Posts: 45
Joined: Fri Jul 18, 2008 10:41 am

Post by RGBA » Mon Oct 20, 2008 1:24 pm

If you are refer to a MD5 collisions:
Yes, it is technical possible, but just in very rare cases.

I surely know about how to signature files, but at least I would be the only one,
that would do it and you're the only one, who would need.
You maybe forget the possible more work behind. Not at least, for all hosted files.

Come on, everbody should know where loading files
or don't be surprised, if a critical error happens (like virii, spyware).
XnView 1.95.3 de | XP Prof. SP3

Post Reply