Full Disclosure: Re: apache.org files are infected?

[Andrew Haninger <ahaning () gmail com>]

On 7/22/05, Larry Seltzer <larry () larryseltzer com> wrote:
> > > The apr-1.0.1.tar.gz.md5 that I downloaded looks like:
> > > apr-1.0.1.tar.gz: 0A 3C B9 11 EA 18 23 CF  A3 E5 86 38 92 77 47 05
> > > which is odd. And then,
> Why is this odd?
I've always only seen md5sums as long strings of letters and numbers.
I'm actually just now realizing that maybe they're really just a bunch
of hex pairs (?). It didn't look like a normal md5sum output to me
before, but now that I look at it closer, they are identical strings
of characters, but the strings themselves are not identical. md5sum -c
<file> on Linux did not work in this case.

> > > md5sum apr-1.0.1.tar.gz
> > > 0a3cb911ea1823cfa3e5863892774705  apr-1.0.1.tar.gz
> They look identical to me
What are you using to look at them?

Thanks.

-Andy
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/