Linux Mint Forums

Hello Guys

As I did not know where to report what I found out downloading the ISO image of LM 18, I choose to begin a new topic here (so sorry). As I read some time ago about the hack of LM webpage early this year I chose to SHA256 the ISO file before burning it to a DVD and surprise! the SHA256 were different!

The (verified) SHA256 for the Xfce 64-bit Edition was "2151852abb34bd62350fab807acc04b3f337d928c7c8092aebea7d0524587ac" BUT the one from the ISO file downloaded from the main mirror at "https://ftp.heanet.ie/mirrors/linuxmint ... -64bit.iso" was "833b59032d7a7335e8a01b742aa31a220cdc9326a29fdd91c4c068786d0eb8c7".

I also know that the problem was NOT a download glitch (I downloaded the file from this source TWICE and always got the same wrong SHA256) or a rootkit on my machine (as the SHA256 from the ISO file downloaded from EvoWise CDN at "https://www.linuxmint.com/edition.php?id=222" checked out all right and thus cleared my worries about installing a spyware/rootkit infected ISO).

Thus, it would be sensible for ANY user to download the same suspected ISO file from the same source to see if those results are accurate and thus deserving of further attention of the LM team).

The Guy from BR

the_guy_from_BR wrote:I also know that the problem was NOT a download glitch (I downloaded the file from this source TWICE and always got the same wrong SHA256)

Hate to disappoint you, but I just downloaded that file from that same url and: That looks like the correct one (I assume you accidentally left out the final f in your original message - a SHA256 hash cannot be 63 characters long).

So... Something is/was messing up your connection to ftp.heanet.ie.

Edit
By the way, the fact you got the same broken one twice doesn't necessarily mean you got it from the actual source server twice. It's quite possible some server between you and ftp.heanet.ie cached the file.