Bitcoin Forum

Bitcoin => Bitcoin Discussion => Topic started by: visaco on August 10, 2015, 09:36:58 AM



Title: bitcoin wallet from bitcoin.org...hash issue ....solved
Post by: visaco on August 10, 2015, 09:36:58 AM
there is a problem with the signature

http://s24.postimg.org/aukts5ql1/bitcoin_mismach.png


Title: Re: Don't download bitcoin wallet from bitcoin.org...maybe the website is hacked..
Post by: Brad Harrison on August 10, 2015, 09:41:54 AM
Hmm I wonder what is going on and good catch by the way!


Title: Re: Don't download bitcoin wallet from bitcoin.org...maybe the website is hacked..
Post by: pedrog on August 10, 2015, 09:48:53 AM
Everything is fine here, just downloaded bitcoin-0.11.0-linux64.tar.gz:

Code:
$ sha256sum bitcoin-0.11.0-linux64.tar.gz 
f9d83c4de5157c4901866d9400532ac3589bf75123f952d73ce993287e38d419  bitcoin-0.11.0-linux64.tar.gz

It matches https://bitcoin.org/bin/bitcoin-core-0.11.0/SHA256SUMS.asc...


Title: Re: Don't download bitcoin wallet from bitcoin.org...maybe the website is hacked..
Post by: shorena on August 10, 2015, 09:49:09 AM
there is a problem with the signature

[ img]http://s24.postimg.org/aukts5ql1/bitcoin_mismach.png[/img]

Cant confirm.

Do you get the same result when you compare from terminal?


Title: Re: Don't download bitcoin wallet from bitcoin.org...maybe the website is hacked..
Post by: visaco on August 10, 2015, 12:21:07 PM
there is a problem with the signature

[ img]http://s24.postimg.org/aukts5ql1/bitcoin_mismach.png[/img]

Cant confirm.

Do you get the same result when you compare from terminal?

i did compare it on terminal ...it shows the correct hash ...it matches
strange .....
my GtkHash has a bug or something....anyway thank you for your answers.


Title: Re: Don't download bitcoin wallet from bitcoin.org...maybe the website is hacked..
Post by: luv2drnkbr on August 10, 2015, 12:32:45 PM
uncheck HMAC, the result you're getting is what you get when you use HMAC-SHA256 on the file with an empty string as the HMAC key


Title: Re: Don't download bitcoin wallet from bitcoin.org...maybe the website is hacked..
Post by: DannyHamilton on August 10, 2015, 12:41:06 PM
Perhaps change the alarmist subject on the thread (edit the OP) so as not to scare the foolish that don't understand the discussion that has occurred within the thread?


Title: Re: Don't download bitcoin wallet from bitcoin.org...maybe the website is hacked..
Post by: VirosaGITS on August 10, 2015, 02:00:05 PM
Perhaps change the alarmist subject on the thread (edit the OP) so as not to scare the foolish that don't understand the discussion that has occurred within the thread?

Please do, OP. I made a o.O face when i saw the allegation in the post title. Add [Nevermind] or something, if you please. :)


Title: Re: Don't download bitcoin wallet from bitcoin.org...maybe the website is hacked..
Post by: worldinacoin on August 10, 2015, 02:02:14 PM
Exactly it is extremely alarming to say bitcoin.org was hacked!


Title: Re: Don't download bitcoin wallet from bitcoin.org...maybe the website is hacked..
Post by: Herbert2020 on August 10, 2015, 02:06:09 PM
try to download the bitcoin-0.11.0-linux64.tar.gz again and from a different pc and check it again.didn't see the second comment of the OP
and you should change the topic of the thread to something like "bitcoin-core signature is not right" instead of what it is right now.


Title: Re: Don't download bitcoin wallet from bitcoin.org...maybe the website is hacked..
Post by: DannyHamilton on August 10, 2015, 02:36:27 PM
try to download the bitcoin-0.11.0-linux64.tar.gz again and from a different pc and check it again.
and you should change the topic of the thread to something like "bitcoin-core signature is not right" instead of what it is right now.

Please read the thread instead of posting nonsense. (Ah, I see you are participating in a sig ad campaign. Nevermind, clearly you aren't here to share knowledge, and are just trying to increase your post count by making a post that you feel is vaguely related to the topic.)

There is nothing wrong with the bitcoin-core signature.

The OP simply didn't understand how to properly use the tool that he chose for verifying the signature.


Title: Re: Don't download bitcoin wallet from bitcoin.org...maybe the website is hacked..
Post by: manselr on August 10, 2015, 06:10:06 PM
Is this only happening with the linux version or with every single one? Please don't spread fear if you aren't 100% convinced you are doing the hash check correctly, this can lead to unnecessary panic.


Title: Re: Don't download bitcoin wallet from bitcoin.org...maybe the website is hacked..
Post by: ransomer on August 10, 2015, 06:23:23 PM
Everything we think is safer than something else.... is only days from being proven unsafe.

Whether this particular thread was hacking, another problem, or Peter calling the wolf is coming - That is the state of bitcoin right now. The ability for normal people to keep wealth safe is the main area where bitcoin is lagging very far behind FIAT. Criminals probably find bitcoin safer already now because they are in danger of having funds frozen etc... but having criminals as the target market cannot break bitcoin into main acceptance... we need someone to come up with an innovation that allows bitcoins to be safe..and not in a constant rat race to stay ahead of the latest hacking idea.


Title: Re: Don't download bitcoin wallet from bitcoin.org...maybe the website is hacked..
Post by: Jorge320 on August 11, 2015, 12:43:50 AM
Whoa, nice catch!  What do you think, fake site redirected to download directed to a singular wallet or the hacker?  Definately motivates me to be hyper detail oriented moving forward.


Title: Re: Don't download bitcoin wallet from bitcoin.org...maybe the website is hacked..
Post by: shorena on August 11, 2015, 12:30:28 PM
Whoa, nice catch!  What do you think, fake site redirected to download directed to a singular wallet or the hacker?  Definately motivates me to be hyper detail oriented moving forward.

I suggest you start your new way of perception in live by reading the entire thread.

There was no hacks, there was nothing wrong with the site, OP just did not use the tool the way the devs thought optimal (enabled HMAC w/ empty key while it should have been disabled).