Bitcoin Forum

Edit: Updated for 0.8.0

I would like to encourage the decentralized distribution of Bitcoin releases.

I have mirrored the sourceforge bitcoin URL:
http://iweb.dl.sourceforge.net/project/bitcoin/Bitcoin/bitcoin-0.8.0/

Here:
https://www.bitaddress.org/mirror/bitcoin-0.8.0/

Here is a direct link to the Windows installer:
https://www.bitaddress.org/mirror/bitcoin-0.8.0/bitcoin-0.8.0-win32-setup.exe

Can others members of the community post mirrors? Can we agree on a URL path structure?
I propose:
/mirror/bitcoin-0.8.0/

If we create a mirroring convention then people can mirror bitcoin downloads without posting that they are doing this. With the hope that one day many sites provide these hidden mirrors and it becomes unpractical to block the global availability of bitcoin software.

Included in the folder is the .ASC signed hashes. Can someone let me know who is signing the hashes and post a link to their public key?
Gavin's public key is in the folder and is used to sign the .ASC

Also, why is the public key of the hash signer not included in the README.txt information?

The average Joe cannot check file signature. An attacker could compile the client with malicious code and claim as original.

When Bitcoin installers and files will have a digital signatures recognized by Windows file properties that will be the easy signature checking for dummies against dummies.

For smart people all that is needed to find file is checksum and helpfully also a file name. Bitcoin installers are spread all over P2P systems.

If government wanted to damage Bitcoin it will go not only after sites hosting official installers but also the seednodes in clean install and bootstrap IRC channel in hope it will prevent new people from coming in.

I couldn't find a torrent for anything newer than version 5. Can you post a magnet link?

If you are not going to verify the signed hash of the file then you should download from sourceforge. If you cannot download from sourceforge then it's worth learning how to verify the download and no one should download from a mirror and use the binaries without verifying the download.

I'm talking about other P2P systems like DirectConnect and Gnutella2

Someone with good TPB account (Trusted or VIP status) can make a torrent of 0.7.1 version and upload it to TPB. My own account got suspended.

Here is how to verify the hash of the file:

Linux (or cygwin)

For Windows or anything else I found this website where you can upload the file or paste a URL and get the sha1 hash:
http://hash.online-convert.com/sha1-generator

Here is a free command line tool available from Microsoft.
File Checksum Integrity Verifier (FCIV) utility:
http://support.microsoft.com/kb/841290

Windows:

0.7.2 now available on the mirror:
http://www.bitaddress.org/mirror/bitcoin-0.7.2/

http://www.bitaddress.org/mirror/bitcoin-0.8.0/