I understand how it works but I don’t understand why. Let’s say I hack VLC’s website to modify their download file to add something malicious. Now the checksum of the new file is going to be different from the checksum of the website but wouldn’t I just change the checksum of the website too?
In: 6
If you got access to the VLC website then yes, maybe you could do that. But VLC also has their program distributed to many other independent websites in order to make it more available for downloading than VLC itself can support. Those other sources of the download might serve up altered files but you could always check the checksum from the VLC website to figure out if they are the same or not.
Latest Answers