Hacker News new | ask | show | jobs
by qwerty_asdf 4623 days ago
Uh, no thanks.

That site does not readily provide hashes for their binaries (MD5, SHA512, whatever), and the page is smeared with ads. There's no way to know if the site is trustworthy.

And, anyway, where would I get the trustworthy hashes? They'd need to be communicated to me, directly from the horse's mouth. I'd need to visit ftp.firefox.com, to find out what the correct hashes are in the first place, and then check them against the binary download I receive from your site.

The link you should have provided was:

http://sourceforge.net/projects/portableapps/files/Mozilla%2...

Version 25 isn't listed there yet.

All of this is even less convenient than digging for and deciphering the meaning of Firefox's official downloads.
2 comments
lelandbatey 4623 days ago
Umm... Hm. I'm seeing just one ad on that page (a very conservatively placed Google AdSense ad): http://puu.sh/530fg.png

Also, I see the hash right there on the page: http://puu.sh/530kX.png

link
Surio 4622 days ago
I think you literally jumped the gun with your assessment of portableapps platform. :)

Take a look again over the weekend. They are completely FOSS and all their bundling and bundled packages are transparent.

The entire project is voluntary, and it usually takes a day or two from the official release dates, before the volunteers bundle, test, and release the portable application to the general users.

link