Perl 6 - the future is here, just unevenly distributed

IRC log for #crimsonfu, 2016-09-14

crimsonfu - sysadmins who code

| Channels | #crimsonfu index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
01:47 ilbot3 joined #crimsonfu
01:47 Topic for #crimsonfu is now http://crimsonfu.github.com - ConfiguRatIon Management of Systems Or Network kung FU | logs at http://irclog.perlgeek.de/crimsonfu/today
16:40 pdurbin Please let me know what you think of this comment about using MD5 to verify file integrity: https://github.com/IQSS/dataverse/issues/3354#issuecomment-247075207
16:50 bene i think you're conflating security and integrity kinda
16:51 chasmo77 joined #crimsonfu
16:51 bene but i don't have an opinion on this really :-)
16:53 pdurbin we're using MD5 to verify file integrity. that files haven't been corrupted during upload or download
16:53 pdurbin like you do
16:58 pdurbin What do you folks use to ensure file integrity? MD5? SHA-1? Something else? Do you have a preference?
17:00 bear older code uses md5 only because it's old - but since most of my code generates hashs for other things, they have all been moved to sha-1 now
17:00 bear so sha-1 is preferred but you have to be ready to toss out an md5 for older things
17:40 pdurbin bear: you're generating sha-1 values to verify file integrity?
17:49 hydrajump pdurbin: here's some good info http://security.stackexchange.com/questions/87375/why-are-md5-and-sha-1-still-used-for-checksums-and-certificates-if-they-are-call
17:53 pdurbin hydrajump: thanks
17:59 bear not specifically for files, just that my python code shifted to sha1 to get away from md5 - I need to shift it to something newer now that servers can handle the newer hash algos
18:06 pdurbin Ok, the focus for me is file integrity, being able to tell users that if they're worried about a corrupted download, they can always calculate the MD5 themselves and compare with what the server says it is. I think MD5 is fine for this purpose.
18:13 bear yes, the flaws with md5 are orthagonal to the function it services for file integrity
18:18 pdurbin exactly my point
18:21 pdurbin MD5 is good enough if you just want to know if the file wasn't corrupted during download.

| Channels | #crimsonfu index | Today | | Search | Google Search | Plain-Text | summary

crimsonfu - sysadmins who code