ShaSum and Md5 inconsistent

[realheresy]

I downloaded virtualbox-5.0.10-104061-OSX.dmg and ran Shasum on the file and came up with incorrect calculation. Just for fun, I then ran MD5, which came out with a correct calculation. Knowing that MD5 is now solvable and trusting shasum more, I of course will not install the package. Has anyone else noticed this? Is there a known man in the middle attack operating on the downloads page? And most importantly, where can I get the actual file as I need to install virtual box soonish.

If you have a chance, try it for yourself and see if you get the same results.

Any help or advice or comment would be greatly appreciated.

[frank]

Just verified: The MD5SUM and the SHA256SUM of the 5.0.10 Mac OS X package is correct. Please keep in mind that SHA1 != SHA256!

[loukingjr]

Frank is correct of course as is the SHA256 sum.

the command to check SHA256 in the Mac terminal is…

Code: Select all

shasum -a 256 <file path>

[realheresy]

I stand corrected. I will try to read what is actually written next time instead of immediately launching my terminal and running the wrong algorithm. thank you Frank and Loukingjr