What is the point of providing an MD5 or SHA1 hash along with a downloadable executable?

Question

I thought they were there for security; to verify that the file has not been modified. But, of course, if someone is able to modify the file, then they can also modify the page using a hash!

What security does he really offer?

Answer 1

They are usually there to ensure a complete and correct download.

, : , . "" , "" , , , .

Answer 2

, .

. apache.org , . . MD5: apache.org, .

Answer 3

. , , , , .

Answer 4

, .
, , , , CD/DVD, , , , .

Answer 5

MD5 , , ISO Linux.

Answer 6

, MD5 SHA1 . MAC HMAC. .

Answer 7

the right way to do this is to provide hashes on a web server that lists all the files and their hashes. the connection to the server must be behind SSL / TLS to ensure that the server is the correct server and not an imposter.

in short - save hashes out of band from files.