9.04 Final == RC

[Tommy Trussell]

On Fri, Apr 24, 2009 at 7:51 PM, Derek Broughton <derek at pointerstop.ca> wrote:
> Steven Susbauer wrote:
>
>> Matthew Flaschen wrote:
>>> Nils Kassube wrote:
>>>> W. S. S. wrote:
>>>>> Is the 9.04 release candidate exactly the same as the final version?
>>>>> I can't seems to find the md5 to check.
>>>> Try this: <http://releases.ubuntu.com/9.04/MD5SUMS>
>>>
>>> That's not a secure page.  Better use
>>> https://help.ubuntu.com/community/UbuntuHashes/
>>>
>> The ISOs are also downloaded from an unsecure page, it must be a
>> conspiracy!
>
> Well, as long as you can get your hashes from a secure source, it shouldn't
> be necessary to get the ISO from one.

sadly, that is no longer true, as md5 hashes have been shown to be exploitable.

http://www.doxpara.com/md5_someday.pdf