Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

When installing software onto my PC, I generally like to run a hash check against my download before installing it. Many download pages provide an MD5sum to use for this kind of check.

See: Some random page on the net that explains this practice.

I have just downloaded TortoiseHg software for Windows from http://tortoisehg.bitbucket.org/ but I cannot see the MD5 mentioned anywhere.

I may be missing it. Do you know where I can find the hash code for the latest download packages?

share|improve this question
    
Although not a 100% guarantee, is the app digitally signed? – Karan Dec 18 '12 at 6:37
    
Thanks for your comment. I'm not sure. I don't tend to click on anything I've downloaded until I check the MD5sum. How would I tell if it were digitally signed? – JW. Dec 18 '12 at 6:39
    
Ok I have right-clicked on it and looked at properties and yes, there seems to be a tab for Digital Signatures. – JW. Dec 18 '12 at 6:41
    
Yeah, I see a digital sig by Steven Borho on Dec. 12. In the absence of a checksum I guess this is the best you can do to ensure that the file hasn't been tampered with (see Is it possible for a digitally signed application to be infected by a virus?) – Karan Dec 18 '12 at 6:48
    
Thanks for the link to that question. Apt because it was just occurring to me too. – JW. Dec 18 '12 at 7:03

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.