Re: [PLUG] check for a file being transmitted via ftp

Unless you are trying to prove something hasn't been -maliciously- altered, MD5 is more than adequate. It is perfectly fine to use MD5 for detecting transmission errors.

That is part of the reason that attack indicators are frequently posted as MD5s... in the extremely unlikely event that there happens to be a collision, the impact is pretty negligible.

--Matt

On Tue, Mar 25, 2014 at 3:05 PM, JP Vossen <jp@jpsdomain.org> wrote:

> On 03/25/2014 02:34 PM, Tom McCurdy, Jr. wrote:
>> You could use MD5SUM to help verify the integrity of the file you're downloading.

On 03/25/2014 02:47 PM, Eric at Lucii.org wrote:

This is a novel (and excellent!) idea. I'll have to look into it.
Since the MD5 sum could conceivably be sent after the main file it
would also act as a trigger file.

Yeah, just stick the hash value in the 'im_done' file.

While I'm guilty of this myself, out of habit, we should really NOT be using MD5 anymore, it has been weak and broken for years. Using at least SHA256 is much better. I realize in this case it's not that important, but we all need to get out of the MD5 habit...

Later,
JP
----------------------------|:::======|-------------------------------
JP Vossen, CISSP |:::======| http://bashcookbook.com/
My Account, My Opinions |=========| http://www.jpsdomain.org/
----------------------------|=========|-------------------------------
"Microsoft Tax" = the additional hardware & yearly fees for the add-on
software required to protect Windows from its own poorly designed and
implemented self, while the overhead incidentally flattens Moore's Law.
___________________________________________________________________________
Philadelphia Linux Users Group -- http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug

___________________________________________________________________________ Philadelphia Linux Users Group -- http://www.phillylinux.org Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug