Th3 SpaceIO
SPACEIO // LINUX Command of the Day #12
sha256sum: prove the file you downloaded is the real one
How do you know the file you downloaded is the real one?
sha256sum file
What it does
sha256sum prints a fixed fingerprint for a file. Compare it with the one the publisher lists. If it differs by even one character, don't trust the file.
Why it matters
Attackers swap legitimate downloads for tampered ones. Checking the hash catches it.
Try it
Check the hash of a file you downloaded. Did it match? Share what you found in the community.