[tor-talk] How can I make sure that the Tails I'm running is legitimate?

[grarpamp]

On Fri, Aug 14, 2015 at 11:34 AM,  <qazxswedc at openmailbox.org> wrote:
> On 2015-08-14 13:55, Aeris wrote:
>>>
>>> So I'm running a Tails on a DVD-R version 1.5 and I'm very curious as to
>>> if I'm running a legitimate copy of Tails. Could you guys help me?
>>
>>
>> AFAIK, you can sha256sum the corresponding /dev/XXX device.
>> The hash will be the same as the one indicated on the
>> https://tails.boum.org/download/index.en.html page.

No, you cannot check a suspect OS with a suspect OS.
Have a friend check the hash or signature with their own OS
that is different from your OS, or use different OS at library,
store, school or work to check it.

> It's been almost half an hour and sha256 on /dev/sdX still ain't done yet :(
> Something's wrong here probably.

No there's no "locks" unless your OS is lame. Change your blocksize...
dd if=/dev/foo bs=2k | sha256
If your OS chokes on the native 2k like it does 512, use 8k or 1m
and see if it streams better.