I understand how it works but I don’t understand why. Let’s say I hack VLC’s website to modify their download file to add something malicious. Now the checksum of the new file is going to be different from the checksum of the website but wouldn’t I just change the checksum of the website too?
In: 6
You can fuck around with a download which would change its checksum easily enough. But you can’t change the checksum on the website. It is what it is – set in stone. You would need to somehow hack through the website’s https encryption to present a checksum to arbitrarily be what you want it to be, but it’s virtually impossible. Without access to a quantum supercomputer, it would take ***decades*** for conventional computers to crack https encryption and inject a checksum of your choosing.
Latest Answers