FF 4.0 Update Size is Different Than Stated
At <http://www.mozilla.com/en-US/firefox/new/?WT.mc_id=ba3613&WT.mc_ev=click>, the FF 4.0 update for Windows is listed as 8 Megabytes, but the actual download is 12,580,112 bytes, or 12-ish Megabytes. The md5sum of what I downloaded is:
$ md5sum.exe Firefox\ Setup\ 4.0.exe 417e9bc84cd14b0d7d9c05dd5e869bbe *Firefox Setup 4.0.exe
Does the page I downloaded from need updating, or is there something wrong with the file I downloaded? Avast version 5.0.677 with definition version 110326-0 tells me there's nothing wrong with the file, but I'm not running it until I figure out what's up with this.
Wšykne wótegrona (3)
An aside - the page I linked to only lists the download sizes if Javascript is disabled. Go NoScript.
Wót samskuce změnjony
All is well. I posted this to security@mozilla.org and received this response:
Thank you for pointing this out. The < noscript > text appears to be
quite out of date and I will pass this along to the web site
maintainers.
The expected size of Firefox 4 for windows is, indeed, 12Mb and the md5 hash you listed is correct for the en-US version. Using Windows Explorer (the file manager, not Internet Explorer the browser) you can also right-click on the installer to examine its properties and confirm that it is signed by the Mozilla Corporation. Unnecessary in this case because you've confirmed the md5 hash.
If you're curious and want to double-check in the future our hashes
can be found at
https://ftp.mozilla.org/pub/mozilla.org/firefox/releases/4.0/MD5SUMS
https://ftp.mozilla.org/pub/mozilla.org/firefox/releases/4.0/SHA1SUMS
moderator broke the HTML tag that was blocking the end of this posting
Wót the-edmeister změnjony
Hey Mozilla, my previous response is not, in fact, incomplete, it only looks like it when you have JavaScript enabled, because the email I quoted contained some HTML tags. Do you need improved sanitization on these forms?