quote:
Originally posted by KeyStorm
As far as I can tell the torrent link, and by any purpose the download, is based upon an md4/5 hash of the complete file, so there can't be a faked part of it if the hash you download is the hash an official source provides (which Patchou himself or any admin around has calculated using the original binary). You only can download parts of the file that match the hash set by the .torrent file. And if the .torrent file is provided in the official server, there is no way to fake it.
There may be other .torrent's with fakes/viruses/trojans/porn around, but those .torrent's weren't, aren't and won't be THE official .torrent provided by msgplus.net.
yes I know that, that isn't the issue. The issue is that everybody can fake an official torrent, and those who download most likely do _not_ know the difference, heck they even might not know an official torrent exists....
Hence the reason why my folder with download Plus! setups from P2P networks are full of virusses, corrupted files, fakes (yes many are deliberate!!!), etc...
quote:
Originally posted by monster.rat
I don't actually see anything wrong with what mattm59 is saying. The actual setup for messenger plus is put on msgplus.net, so why can't a torrent file. People will only download the torrent file from msgplus.net
no they will not... any site can put up/spread a torrent which is fake. If someone sees a torrent labeled Messenger Plus!, he isn't going to search for the official site first to check if the torrent is a fake or not, he is going to run/download the torrent immediatly. Also, if they would go to msgplus.net to get the correct torrent, why on earth wont they download the setup directly from it in the first place? this doesn't make sense
/ 
