• Buddahriffic@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    ·
    1 day ago

    My version of questioning this is if the same source is providing both the file and the hash, does it matter how hard it is to fake the hash? It could just generate a new hash for the fake file, couldn’t it?