My favorite one is Hashtab, but the Mac version has been discontinued from the App store. This lets you verify that these two files are genuine and not modified. nfo files signed by TNT contain the SHA-256 digest for rhash and for tnt.sfv. (At this point I have personally not found any malware, but that does not mean that there is none.) nfo file? - So, for the next step, I will give the benefit of the doubt, in the sense that they hopefully do not insert malware. In case you decide to trust to be a reliable publisher, have you checked the tnt.sfv and rhash files against the hashes provided in the signed. The tnt.nfo file signature actually verifies successfully, which is good, but it still leaves us with the question, if this is really 'TNT'. In other words anybody could have created a TNT sounding email address at Tutanota in 2017 and created the associated GPG key. This key has not been signed by any other authoritative TNT keys. Have you personally checked the signature using GPG of the PGP-signed tnt.nfo file? - The text is signed with the key associated with the purported TNT ( email address, which has been uploaded to a public PGP server. By following the verification chain, you will see that the connection between TNT and the files you actually use in whatever Adobe Zii package you download is not as you would have expected. There are no other links to TNT, thus the connection is at best tentative. If you have older packages from TNT, you may find it in there. How do I know that this Adobe Zii package originates from TNT? - The email address in the package which is claimed to be linked to TNT ( has been used since 2017. You may need to learn a little bit about checking file hashes, public key cryptography and GPG to understand all of the following. This is intended to provide some information, so that you can make an informed decision about the risks you are willing to take. Does this Subreddit as well as other sites distributing Adobe Zii provide a false sense of security by claiming that the files originate from the reputable TNT group? Please note, that I'm not singling out any particular site, as all the packages that I have found have the described shortcomings.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |