Page 1 of 1

Mod Portal Downloads have Inconsistent Checksums

Posted: Fri May 08, 2020 8:22 pm
by jables
This is easy enough to reproduce. Just pick a mod at random and download it a few times:

> $ for i in {1..10}; do wget -q https://mods.factorio.com/download/Tape ... 000c0398d8; done
> $ sha1sum 5e8d0fab65e928000c0398d8*
> 8828d00723ad8268829a3f488a8f3ff50656058b 5e8d0fab65e928000c0398d8
> b2649e14402afd91bcdd0be3e9faf31c2fdb5a31 5e8d0fab65e928000c0398d8.1
> db0ea6f7a3e7a08665df10f161a67bf8b9dedaeb 5e8d0fab65e928000c0398d8.2
> 7a2cfbaa3d10cf9057c7ccc01c2e32d502961321 5e8d0fab65e928000c0398d8.3
> 683979dc261af4ce911027c8e1c69116b0d4b20f 5e8d0fab65e928000c0398d8.4
> 86e85eed875f6a42797d4896e8bc064b374d7009 5e8d0fab65e928000c0398d8.5
> 1dbe6e67da461bf6f9f41a60e0e736f203432008 5e8d0fab65e928000c0398d8.6
> f7bf1661d916516dd68f8a9153925b7b5825c6c0 5e8d0fab65e928000c0398d8.7
> 7d26cfde576816e4426b1b715bbf9468664b9c19 5e8d0fab65e928000c0398d8.8
> 24d1ad5354d93fa922e09ba869392ef7195218c6 5e8d0fab65e928000c0398d8.9

Maybe I out of the loop on some crucial information, but these links should be downloading identical files, shouldn't they? Why are their checksums different?

Re: Mod Portal Downloads have Inconsistent Checksums

Posted: Fri May 08, 2020 8:29 pm
by boskid
Are you sure you are downloading a mod and not downloading a login page that each time has a different csrf token?

Re: Mod Portal Downloads have Inconsistent Checksums

Posted: Fri May 08, 2020 11:24 pm
by jables
boskid wrote:
Fri May 08, 2020 8:29 pm
Are you sure you are downloading a mod and not downloading a login page that each time has a different csrf token?
That's exactly what I was doing. Thank you! I was starting to get tunnel vision.