[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-talk] How can I verify that this "Onionshare" program is indeed the one intended for me to get?

To: tor-talk@xxxxxxxxxxxxxxxxxxxx
Subject: Re: [tor-talk] How can I verify that this "Onionshare" program is indeed the one intended for me to get?
From: oliver <kafkane@xxxxxxxxxx>
Date: Sat, 14 Nov 2015 18:45:41 +0000
Delivered-to: archiver@xxxxxxxx
Delivery-date: Sat, 14 Nov 2015 13:46:22 -0500
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/simple; d=riseup.net; s=squak; t=1447526769; bh=A50sBmFy2ek8jZHgdUd6SuM1noLiHBPpoTMkMaXsKRk=; h=Date:From:To:Subject:References:In-Reply-To:From; b=IMGi2XIpkMiwy7wLoakaurOkAG3A7h4G+SuD/5zL8fPEZENUcYZX+L2MVZ5rJLfBP WqtLhtavvqfvJKRfsnoDcET4kiRgdMk8GhseBhDLY+FvDY4BqhfFNBKAYid44N2jeK LVoAN6JFqrX6lJ4AVsON/wM9Iwj0zSgAJp2X6dtk=
In-reply-to: <56473E77.5060603@xxxxxxxxxxxxxxx>
List-archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-id: "all discussion about theory, design, and development of Onion Routing" <tor-talk.lists.torproject.org>
List-post: <mailto:tor-talk@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
References: <56473E77.5060603@xxxxxxxxxxxxxxx>
Reply-to: tor-talk@xxxxxxxxxxxxxxxxxxxx
Sender: "tor-talk" <tor-talk-bounces@xxxxxxxxxxxxxxxxxxxx>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Qaz:
> how I can verify that this
> Onionshare program is indeed the one intended for me to get?

this program is not affiliated with the Tor Project, so in order to get
specific assistance you'll have to talk to the original developer, Micah
Lee.

i'll help you, though. it appears you're fetching the project source
code from Micah's github repository for the project. the only way i can
think of verifying the authenticity is to hash the .deb file you build
before you install it.

i'm building on debian. my sha256 hash is below:

c6437462011f4d103df4f7407edfcfdd0df646dd274c9f61d1f10baecf094f13
deb_dist/onionshare_0.7.1-1_all.deb

good luck.

- -- 
oliver (A)

kafkane@xxxxxxxxxx
4096R/AF2D5D34EEFBBDDF9542F95BFAEF521A729674D7
-----BEGIN PGP SIGNATURE-----
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=7uJd
-----END PGP SIGNATURE-----
-- 
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Follow-Ups:
- Re: [tor-talk] How can I verify that this "Onionshare" program is indeed the one intended for me to get?
  - From: Qaz
- Re: [tor-talk] How can I verify that this "Onionshare" program is indeed the one intended for me to get?
  - From: Qaz

References:
- [tor-talk] How can I verify that this "Onionshare" program is indeed the one intended for me to get?
  - From: Qaz

Prev by Author: Re: [tor-talk] improvements torstatus.blutmagie.de
Next by Author: Re: [tor-talk] MITM attack on TLS
Previous by thread: [tor-talk] How can I verify that this "Onionshare" program is indeed the one intended for me to get?
Next by thread: Re: [tor-talk] How can I verify that this "Onionshare" program is indeed the one intended for me to get?
Index(es):
- Author
- Thread