md5 not matching

pcworld · August 11, 2020, 9:23am

First of all, great thanks to anyone involved in this great project!

What I miss on the download page on https://release.blackmesasource.com/ is an md5 of the BlackMesa.zip file, that way one could verify a download site isn’t trying to fool you.

The md5 of the BlackMesa.zip I downloaded from “FileShack” is: c46a8ce25bde0760f23ae1c94b60c64d
That zip file contains the following BlackMesa.md5:

f1d86575816f4c6994a5657eebf76409 *BlackMesa.7z 502b417a7857c3ffb82a8b2c93ee1ecf *BlackMesa-Setup.exe

BlackMesa-Setup.exe matches, though the md5sum of my BlackMesa.7z is a different one: 30dfce1f9105e384d26772a67a2158b3

There are different possible reasons:

My download is corrupt.
The hoster modified BlackMesa.7z (e.g. inserting malware) and was too stupid to update BlackMesa.md5.
The md5 provided in BlackMesa.md5 is actually wrong.

At least the first two cases could have been avoided by providing an md5 of BlackMesa.zip on the official Black Mesa site.

Any suggestions are appreciated!

RyanTranquil · November 25, 2018, 2:20am

Hi PCWorld,

We have been unsuccessful in contacting BSM support directly, since we are in hopes of hosting their files directly on our companies servers. We have partnered with Amazon and Rackspace, and are interested in hosting, since there seems to be lackluster options at this time.

I would highly recommend the staff of BSM to provide MD5 Checksum for all download options so users can verify the integrity of the source.

Thanks,
Ryan

mgr.inz.player · August 11, 2020, 9:24am

You can download official torrent file and check all three files manually (like this)

Anyway, I’ve downloaded official torrent file hosted on https://www.gameupdates.org/details.php?id=5152 (Uploaded by BlackMesa) and now on mediafire (it has extra trackers).

I re-checked all three files (BlackMesa.7z, BlackMesa-Setup.exe and BlackMesa.md5). So, I’m perfectly sure: all of them have original content. And those md5 sums are official (the same as in #1 post):
f1d86575816f4c6994a5657eebf76409 *BlackMesa.7z
502b417a7857c3ffb82a8b2c93ee1ecf *BlackMesa-Setup.exe

pcworld · November 25, 2018, 3:30am

Okay, finally looked into this.

$ diff -rq BlackMesa_fixed/BlackMesa BlackMesa_wrong7zhash/BlackMesa Only in BlackMesa_wrong7zhash/BlackMesa: BlackMesa-Setup.exe Only in BlackMesa_wrong7zhash/BlackMesa: BlackMesa.md5

So the only difference between the probably-official (f1d86575816f4c6994a5657eebf76409) and 30dfce1f9105e384d26772a67a2158b3 version of BlackMesa.7z is that the latter contains BlackMesa-Setup.exe and BlackMesa.md5. These files are identical to those found in the torrent or direct-download-zips (I compared the hashes).