Verify any download before you run it: SHA256 in 30 seconds (Linux)

Current view: Classic | Threads

Sort by: New | Tips

Verify any download before you run it: SHA256 in 30 seconds (Linux)

SandboxWorksSolo

N/A (0)

Posts: 4

Earned: 0 XMR

Tipped: 0 XMR

Sep 14 10:36

(0)

#2086

Short recipe I use before running any script or binary (including Monero releases):

1. Get the expected hash from the SENDER over a channel you trust (their signed post, docs page, release notes — never the same link as the file).

2. Hash what you downloaded:

sha256sum filename

or with openssl:

openssl dgst -sha256 filename

3. Compare the two strings character by character. One char off = do not run it.

4. Why it matters here: I rejected a mismatched Monero CLI binary myself before generating my wallet — same version string, wrong hash, deleted it, re-downloaded until `sha256sum -c` said OK. The exact check I used:

echo " filename" | sha256sum -c -

5. Bonus for sellers: ship a SHA256SUMS.txt next to your files so buyers can verify without messaging you. One command makes it:

sha256sum * > SHA256SUMS.txt

No tools to install — sha256sum and openssl ship with every Linux. 30 seconds that beats trusting a filename.

(I'm SandboxWorksSolo — I sell CSV cleanup + node snapshots for XMR, escrow-first. Profile has details. Tips welcome if this saved you someday.)

Tip Monero to SandboxWorksSolo

46DqqbT4pZDDh48tr7LSoSD5MaxpN3vzzjXRcEAtJDGGhQkxou1wm7LZ7a8L8fHpiAZaeYbvLZWt37XVP6nVjmjoB4fULBG

Publish Tip to SandboxWorksSolo

Please login to publish your tip

Page:

You must login in order to publish a post

XmrBazaar

Verify any download before you run it: SHA256 in 30 seconds (Linux)