IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [checksum]

27 questions
1
vote
2 answers

tcpdump packets have bad and incorrect checksums on localhost, how to investigate further?

Am investigating a macOS Catalina machine that is believed to be infected with malware. Have been viewing packets with tcpdump and noticed, on connecting to any web address, there are legit packet that gets sent to the DNS server... then... there…
lancealittlebit
  • 21
  • 1
  • 3
1
vote
1 answer

Why do some websites have their hashes on the same area as the download link?

Some sites allow us to use hashes to make sure that the file we download is what it should be and that it is not tampered with. Some sites may have their hashes on a different domain probably on a different server other than the one the download…
Henry WH Hack v3.0
  • 2,109
  • 2
  • 23
  • 37
0
votes
2 answers

How do IoT devices know the checksum of firmware upgrades?

As I understand, some IoT devices verify the integrity of firmware updates downloaded from the internet using the checksum of the file before installing the update, making it impossible for attackers to perform a man-in-the-middle attack and modify…
jweik
  • 3
  • 1
0
votes
0 answers

Latest AWS Windows Cloud Formation bootstrap binaries are not legit?

It seems the latest version of CloudFormation binaries used on EC2 Windows instances are reported as NOT legit by VirusTotal. Mainly cfn-elect-cmd-leader.exe" and…
ZeCloudIsSomebodyElseComputer
  • 1
  • 1
0
votes
1 answer

Is there a way for a file/binary/exexutable to verify it's own integrity?

So I'm making a distributed recovery system which consists of a bunch of hidden usb sticks. I plan to have the file be an executable, probably in the form of a appimage, which will contain my encryption software and encrypted volume. The only hole…
Procapagana
  • 1
0
votes
0 answers

use of md5 for protecting file integrity over http/https call

A common way to ensure integrity of a file uploaded from a client is to include the md5 header in the request which can be used by the server for the same. I would like to know that if a file can be corrupted on its way, then why can't a header be…
user2599052
  • 103
  • 3
0
votes
0 answers

Wondering how to verify devices are still not compromised after reset?

So I am wondering how I can possibly verify different devices that I purchase. Like when you want to verify a file has not been changed you can verify the checksums. So for example, if I buy a new Android device, a new washer, IoT devices for the…
Rideboards
  • 559
  • 4
  • 7
0
votes
2 answers

Why aren't installer isos gpg signed?

When downloading a Linux installer iso, the user is supposed to check the iso with sha or m5sum and compare the result against a checksum file, and then check the gpg signature of the checksum file. If I understand it right, the checksum is to test…
Benchukee
  • 3
  • 1
0
votes
2 answers

How do I know that the ISO image of the Linux distribution I have downloaded does not contain the NSA backdoor?

I have downloaded the ISO image of Kubuntu 20.10 and installed it. I am afraid that the ISO image may have been tainted (for example, by the NSA) to insert a backdoor into it. As I see it, there are two ways to insert a backdoor (I mean an…
robertspierre
  • 495
  • 2
  • 11
0
votes
2 answers

Deploy verifiable webapp source code

Recently there have been quite some discussions about the security approach of ProtonMail. Since it do crypto stuff at client-side, loading the javascript code in the user's browser, as far as i know, even if that code is published somewhere in the…
hwktest
  • 3
  • 1
0
votes
1 answer

Standard ways that sites use Base64 hash/checksum for security/authorization

I saw a few website APIs that use a checksum as a GET parameter. For example: http://api.test.com/get/?people=fathers&view=all&hash={28 character Base64-like string}. The hash relies on all of the GET parameters, changing any of them or adding into…
Joan Clark
  • 1
  • 2
-2
votes
1 answer

Bulletproof Way of Ensuring the Integrity of Base OS Images

is it practically possible to ensure that the integrity of an ISO image for an OS is legit with 99.999% certainty? I was thinking of buying a bunch of DVDs of Ubuntu 22.04 on eBay and comparing the checksums. Would the checksums match up if the DVDs…
ProfessorManhattan
  • 97
1
2