404 errors on all checksum links after download
- Inicie sesión ou rexístrese para enviar comentarios
After downloading ISO's all https://cdimage.trisquel.info... links related to checksums give 404 errors. This could make it easier for an attacker to inject a malicious ISO under the guise of legitimacy.
I don't get 404 on the checksums. I have tested the Trisquel 8 netinst 64bit ISO and it matches the checksum from the website.
Looking back at it, it may just be for torrent file checksums and sigs such as:
https://cdimage.trisquel.info/trisquel-images/trisquel_8.0_amd64.iso.torrent.md5
https://cdimage.trisquel.info/trisquel-images/trisquel_8.0_amd64.iso.torrent.sha256
https://cdimage.trisquel.info/trisquel-images/trisquel_8.0_amd64.iso.torrent.asc
- Inicie sesión ou rexístrese para enviar comentarios