SparkyLinux Forums

Installation & Upgrade => Installation => Topic started by: mmah on December 26, 2025, 12:40:43 AM

Title: Sha256sum and bad signature.
Post by: mmah on December 26, 2025, 12:40:43 AM
Hi all. Downloaded the Xfce amd64 8.1 version. Sha256sum does not match. Gpg verification reports "bad signature". Hopefully just a mixup. Needless to say but I won't be installing.

I was around when Mintlinux iso images were hacked some years ago so nice to see developers signing iso images. Many do not.
Title: Re: Sha256sum and bad signature.
Post by: AxL on December 26, 2025, 02:16:24 AM

Quote from: mmah on December 26, 2025, 12:40:43 AM[....] Downloaded the Xfce amd64 8.1 version. Sha256sum does not match.

(https://i.imgur.com/IqZHXhe.gif) Well, it seems that what you say is completely FALSE.

As you can see in the attached images:

(https://i.imgur.com/o5prFCZ.png)


(https://i.imgur.com/ey9taqA.png)


Since not only the sha256sum is totally correct. They are also md5sum, sha1sum and of course sha512sum.
So, stop spouting nonsense and deceiving other users with FUD & hoaxes. (https://i.imgur.com/4GCd6.gif)







Cheers !!  (https://i.imgur.com/uZvkZOF.gif)

Title: Re: Sha256sum and bad signature.
Post by: AxL on December 26, 2025, 02:38:14 AM
Quote from: mmah on December 26, 2025, 12:40:43 AM[....] Downloaded the Xfce amd64 8.1 version. Sha256sum does not match.

By the way, the first images were from 'sourceforge.net' (Mirror 1).

And this one is from 'archive.org' (Mirror 2):


(https://i.imgur.com/Xu00i0S.png)


And, absolutely all checksums are also all correct.







(https://i.imgur.com/BXCIu.gif)

Title: Re: Sha256sum and bad signature.
Post by: AxL on December 26, 2025, 12:42:08 PM
Quote from: mmah on December 26, 2025, 12:40:43 AM[....]  Downloaded the Xfce amd64 8.1 version. Sha256sum does not match.

Notified the administrator with your lies and FUD ....  (https://i.imgur.com/M548w.gif)

Title: Re: Sha256sum and bad signature.
Post by: mmah on December 26, 2025, 06:38:58 PM
Settle down big fellow. Sorry if I pissed in your cornflakes. I've downloaded the iso image,checksums, and signature again. Yes, sha256sum and signature match.

I'm assuming they were fixed in the last few hours. https://sourceforge.net/p/sparkylinux/activity/?page=0&limit=100#694eafad8cc2817262c63797

Thanks for the warm welcome.
Title: Re: Sha256sum and bad signature.
Post by: AxL on December 26, 2025, 07:39:58 PM
Quote from: mmah on December 26, 2025, 06:38:58 PM[....]  I'm assuming they were fixed in the last few hours.

They haven't fixed anything, because NOTHING was incorrect, tolai. (https://i.imgur.com/Lu1NYbU.gif)


The isos are exactly the same as the ones, I checked this morning (at 02:16:24 AM and 02:38:14 AM).
 As you can see in the links in these two images:

(https://i.imgur.com/akkzbv9.png)


(https://i.imgur.com/axVgGYy.png)


 Where all the checksums were absolutely correct.








FOPM (https://i.imgur.com/BXCIu.gif)