Netscrape download

[From Phil Karn]


Netscape's use of a CGI interface to download the US version
(128-bit key) of Netscape Navigator raises the possibility
that they are "serializing" or "personalizing" each copy they
send out, perhaps in response to a DoS request that they do so
in order to trace unauthorized redistribution.

One way to test this theory without redistributing the actual
code is to compare MD5 hashes of the distributions. After two
days of unsuccessful attempts at obtaining the code from their
overloaded server, I've just successfully downloaded the SunOS,
BSDI and Windows 95 versions of Netscape Navigator. Here are the
MD5 hashes of the files I received:

BSDI version:
4ec4a705e2e4c6560475852fae807c8c

SunOS version:
e72ff352ca7c619cb31b8f8ef3651b28

Windows 95 version:
8e936813f12a1b3b77ed03d9239ebd5d

Anybody care to compare these to the copies they obtain, assuming
the logjam on the server breaks sometime soon?

Phil

-- 
A host is a host from coast to coast.................wb8foz@nrk.com
& no one will talk to a host that's close...........(v)301 56 LINUX
Unless the host (that isn't close).........................pob 1433
is busy, hung or dead........vr vr vr vr.................20915-1433

>>>>> "David" == David Lesher <wb8foz@nrk.com> writes:

I already trashed the Linux .tgz I downloaded, all I've got left to
compare are the Microsoft Windows '95 (spit, to borrow a term), and
Microsoft Windows 3.1 (spit, to borrow a term).

David> Windows 95 version:
David> 8e936813f12a1b3b77ed03d9239ebd5d
       8e936813f12a1b3b77ed03d9239ebd5d  ns_inst-95.exe



# md5sum ns_inst-31.exe
0f4de3e744ec4e356ba9f8feb3ded7ec  ns_inst-31.exe

Linux executable:
$ md5sum =netscape-3.0b5
a82666e8c83a39c4e4653f0de2a930cf  /usr/local/www/bin/netscape-3.0b5

I seriously doubt they're playing any games.

Also, I got onto their system within a half hour of spotting the
announcement sitting in my cypherpunks.spool file and had no trouble
downloading even though it wouldn't let me into the site with Lynx.
I'd say they gave this list preferential, timely treatment ...
-- 
steve@miranova.com baur
Unsolicited commercial e-mail will be proofread for $250/hour.
Andrea Seastrand: For your vote on the Telecom bill, I will vote for anyone
except you in November.

In article <m291cgu9oh.fsf@deanna.miranova.com>,
Steven L Baur  <steve@miranova.com> wrote:
> Linux executable:
> $ md5sum =netscape-3.0b5
> a82666e8c83a39c4e4653f0de2a930cf  /usr/local/www/bin/netscape-3.0b5

Looks like we match:

~ $ md5sum /opt/netscape-3.0b5a-US/bin/netscape
a82666e8c83a39c4e4653f0de2a930cf  /opt/netscape-3.0b5a-US/bin/netscape

Also, for any others who might like to compare their Linux .tar file:

~ $ md5sum netscape.tar.Z
fdface7dbbf0ea350847edf1ad37e4a8  netscape.tar.Z

> Also, I got onto their system within a half hour of spotting the
> announcement sitting in my cypherpunks.spool file and had no trouble
> downloading even though it wouldn't let me into the site with Lynx.
> I'd say they gave this list preferential, timely treatment ...

Three cheers for Netscape!
-- Dave

>[From Phil Karn]

>Netscape's use of a CGI interface to download the US version
>(128-bit key) of Netscape Navigator raises the possibility
>that they are "serializing" or "personalizing" each copy they
>send out, perhaps in response to a DoS request that they do so
>in order to trace unauthorized redistribution.

>SunOS version:
>e72ff352ca7c619cb31b8f8ef3651b28

This is the same one I got.  No funny business there.

	Jim Gillogly
	Mersday, 26 Afterlithe S.R. 1996, 14:25

Thanks. Others have confirmed the BSDI and Windows 95 version, so
I guess they're all the same.

Phil