Providing a checksum without telling you how it was created

MD5? SHA1? We increase security by not telling you.

196 points · 33 comments · view on lemmy.world

33 Comments

bufalo1973@piefed.europe.pub · 62 pts · 335d (1 reply)

Maybe it's the same for all checksums? They should get a prize if they did that.

ryathal@sh.itjust.works · 10 pts · 335d

The grand unified file.

MTK@lemmy.world · 43 pts · 335d (4 replies)

It's not that uncommon because they have specific lengths, so usually just by the length you can know the checksum. Of course it's not perfect, but for file verification it's usually MD5, SHA1, or SHA256, so the length is enough to differentiate between them.

But yeah, dick move.

bleistift2@sopuli.xyz · 26 pts · 335d (3 replies)

It’s the first time I’ve seen it. Are we supposed to memorize the specific length of each hashing function now?

MTK@lemmy.world · 13 pts · 335d (1 reply)

Cyberchef is your friend

https://cyberchef.io/

Uss the magic module or "analyze hash"

some_random_nick@lemmy.world · 26 pts · 335d

A solution to a problem that shouldn't even exist

Tenkard@lemmy.ml · 4 pts · 335d

I'd just run the cli commands to check it

md5 filename sha256 filename

Etc.

As the other user said it should be one of the main ones

somerandomperson@lemmy.dbzer0.com · 27 pts · 335d (17 replies)

UBUNTU 20??!!!

That's ancient. Not even LTS anymore.

What on earth are you downloading that needs this old software?

bleistift2@sopuli.xyz · 19 pts · 335d (15 replies)

It’s Audacity’s AppImage. The Mint repos are terribly outdated.

MrSoup@lemmy.zip · 30 pts · 335d
toffi@piefed.social · 7 pts · 335d (5 replies)

Isn't the unofficial successor tenacity since audacity partly switched to a closed/proprietary license?

hddsx@lemmy.ca · 13 pts · 335d (2 replies)

It’s not the license. It’s the opt-in telemetry. I’m not sure if this is prepackaged binary or not. Either way, that’s why people switched

Lodra@programming.dev · 11 pts · 335d (1 reply)

I absolutely understand not liking opt-out telemetry. Do people generally not like opt-in telemetry? Is this really why the community shifted to a different project?

hddsx@lemmy.ca · 7 pts · 335d

Given that they were planning to implement Yandex telemetry, I’m guessing the answer is yes. Plus they decided to age “limit” to 13+ to support these changes.

If I could recall anything I ate today, I’d tell you what else I remember about audacity back then. As it stands, I can’t. So, sorry about that

bleistift2@sopuli.xyz · 8 pts · 335d

Audacity is released under the GNU General Public License version 3 (GPLv3).

https://github.com/audacity/audacity/blob/master/LICENSE.txt

blaue_Fledermaus@mstdn.io · 1 pts · 335d

AFAIK the "issues" with Audacity were only that they added optional telemetry, and made the project lead a former Microsoft guy.

I may be wrong, I avoid looking too much into this type of drama.

NeatNit@discuss.tchncs.de · 2 pts · 335d (1 reply)

Just out of curiosity: what do you need that the newer versions have but the version on Mint is missing?

bleistift2@sopuli.xyz · 2 pts · 335d

The volume meter is cut off on my old version. I assume that Audacity reads the dimensions of my internal screen (2560px) instead of the one I’m actually using (1920px) when computing the width of the meter.

Mwa@thelemmy.club · 1 pts · 335d (2 replies)

Try using audacity flatpak

bleistift2@sopuli.xyz · 2 pts · 335d (1 reply)

The audacity website didn’t mention Flatpak, so I thought they didn’t support it. However…

Mwa@thelemmy.club · 2 pts · 335d

It's a good try though, if it doesn't work for you uninstall it.

frankenswine@lemmy.world · 0 pts · 335d (2 replies)

guix shell audacity -- audacity

to just use

guix install audacity

to install it

bleistift2@sopuli.xyz · 8 pts · 335d (1 reply)

Kind of you to assume I have your favorite package manager installed

frankenswine@lemmy.world · -4 pts · 335d

it is a solution to your problem whether you like it or not

Greg@lemmy.ca · 4 pts · 335d

Just install McAfee AND Nortons antivirus and everything will be fine

betterdeadthanreddit@lemmy.world · 7 pts · 335d

Dev must've thought the name meant a user was supposed to check some algorithms until they find a match.

bjoern_tantau@swg-empire.de · 7 pts · 335d (1 reply)

Love KDE's Dolphin. In the file properties you can just paste a hash and it will check the correct one for you.

JaxNakamura@programming.dev · 2 pts · 334d

Thanks for pointing that out. I had no idea that was a thing.

Magister@lemmy.world · 2 pts · 335d (1 reply)

not enough digits for md5, could be sha1 yes

bamboo@lemmy.blahaj.zone · 1 pts · 335d

Just did a test of the character counts for different algorithms, here's the number of characters for each:

Command Characters
md5sum 32
sha1sum 40
sha256sum 64
Sxan@piefed.zip · -2 pts · 335d (2 replies)

You're supposed to find out by trial and error. Ubuntu is gamifying security.

bleistift2@sopuli.xyz · 2 pts · 335d (1 reply)

This has literally nothing to do with Ubuntu.

Sxan@piefed.zip · -2 pts · 335d

You're right! Consequently, þe joke is even less funny.