On Thu, 06 Dec 2007 02:35:38 +0100, Gilbert Fernandes

 wrote:
> Signing the hashes could help but you do know very few

quoted text
> people are really going to check those.

Or you pull the MD5s from another source than your packages,

not bloody likely that the two different sites you've selected

for download has both been hacked.

This does not protect against the master site being owned though,

though I guess that'd be noticed and announced.
Easy thing is to use the CDs though, just as people has already

stated. =)
--

Using Opera's revolutionary e-mail client: http://www.opera.com/mail/