Author

Topic: sha1 of bitaddress.org != it's github repo (Read 1440 times)

sr. member
Activity: 437
Merit: 415
1ninja
October 26, 2013, 10:45:40 PM
#5
The github repo is typically ahead of the website version.
legendary
Activity: 2912
Merit: 1060
hero member
Activity: 546
Merit: 500
Looks like the site just hasn't been updated to match github commits for a while.

The version on the site matches https://raw.github.com/pointbiz/bitaddress.org/eeed4db91edd9eda5eb4277a61aa16ad80bdcdcb/bitaddress.org.html exactly.
legendary
Activity: 1204
Merit: 1002
RUM AND CARROTS: A PIRATE LIFE FOR ME
huh, anyone confirm this?
newbie
Activity: 27
Merit: 0
I was check the sha1sum of the script downloaded directly from bitaddress.org and compared that to it's github repo, and the sha1sum's do not match.  Taking a very quick look at the scripts revealed that the github version contained the line "window.Crypto_scrypt      MIT License" whereas the one downloaded directly from bitaddress.org did not.  Now I'm not saying something malicious is going on, but the scripts do not match.  Maybe someone was updating it right when I checked?  I only looked at the first page or two of the scripts for differences.  I assume there's more changes than just the license comment at the beginning.   Anyone have any ideas whats up?

The file sizes are different as well...

Version directly from bitaddress.org:
1d5951f6a04dd5a287ac925da4e626870ee58d60  index.html  445062 bytes (this matches what the site says the correct sha1 is, and what people on here have verified it to be)
bc20a5368bce817fbe61ef8d6063a2a660000be4  bitaddress.org.html 507233 bytes (from the hithub repo. No hits on any search engines for bc20a5368bce817fbe61ef8d6063a2a660000be4)
 
Jump to: