Just downloaded the latest Kubuntu daily, released Dec 22. Noticed that the stuff (ISOs, checksums, GPGs) was all in one place on a non-https server. I consider it a security hazard. I'm kindly suggesting the Kubuntu team to come up with a better setup. The SHA256 sum reads

Code: Select all

ae25bd9f94c33d323909ef81d2d33f5cf44f1dbac6db45349ea2feb547b1db49

Could anyone, part of the Kubuntu team, confirm the sum is accurate, please? That's all I'm asking for. One-time favor. Hopefully, I haven't annoyed anyone. Sorry, I don't yet have a Kubuntu forum account.

raddison wrote:Just downloaded the latest Kubuntu daily, released Dec 22. Noticed that the stuff (ISOs, checksums, GPGs) was all in one place on a non-https server. I consider it a security hazard. I'm kindly suggesting the Kubuntu team to come up with a better setup. The SHA256 sum reads

Code: Select all

ae25bd9f94c33d323909ef81d2d33f5cf44f1dbac6db45349ea2feb547b1db49

Could anyone, part of the Kubuntu team, confirm the sum is accurate, please? That's all I'm asking for. One-time favor. Hopefully, I haven't annoyed anyone. Sorry, I don't yet have a Kubuntu forum account.

You might want to join us on kubuntuforums, as this topic is rather OT for this forum and topic

However:

the sums for official releases are here
https://kubuntu.org/getkubuntu/

for your daily (unofficial, completely unsupported pre-release) iso sums, you already found them here
http://cdimage.ubuntu.com/kubuntu/daily-live/current/
You can verify them this way (using gpg, etc):
https://help.ubuntu.com/community/VerifyIsoHowto
though I am unsure if the fingerprints for your daily, completely unsupported, unofficial, pre-release isos are available this way (https) or not.
https://bugs.launchpad.net/ubuntu-websi ... comments/8

As for http iso access, you'll have to take that up with Ubuntu/Canonical

some (older) discussion on that:
https://bugs.launchpad.net/ubuntu-website/+bug/1564313
iirc Ubuntu.com somewhat recently moved many of its sites to https, but I do not know of any timeline for this, or how far they are going with it.

You might want to join us on kubuntuforums, as this topic is rather OT for this forum and topic

@Clay I'm not kidding. It says "You need to pass the human verification challenge before proceeding" but I can see no captcha or anything. As per your recommendation to take it to the appropriate forum. This is not the first time though. Seemingly it's rocket science to get an account on that forum.

Naw, people do it all the time. I am seeing the captcha checkbox on Chrome and Firefox on numerous systems and OS. Any extensions running?

Nay. Just plain Firefox. But thanks Clay. Happy Holidays.

Edit: Quote removed
I mostly do not understand what you are trying to state here. Ubuntu is not another windows operating system.

blue_bullet wrote:I mostly do not understand what you are trying to state here. Ubuntu is not another windows operating system.

They are a spammer. Please don't quote their link.