Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

FF 4.0 Update Size is Different Than Stated

  • 3 replies
  • 3 have this problem
  • 2 views
  • Last reply by samskuce

more options

At <http://www.mozilla.com/en-US/firefox/new/?WT.mc_id=ba3613&WT.mc_ev=click>, the FF 4.0 update for Windows is listed as 8 Megabytes, but the actual download is 12,580,112 bytes, or 12-ish Megabytes. The md5sum of what I downloaded is:

$ md5sum.exe Firefox\ Setup\ 4.0.exe 417e9bc84cd14b0d7d9c05dd5e869bbe *Firefox Setup 4.0.exe

Does the page I downloaded from need updating, or is there something wrong with the file I downloaded? Avast version 5.0.677 with definition version 110326-0 tells me there's nothing wrong with the file, but I'm not running it until I figure out what's up with this.

At <http://www.mozilla.com/en-US/firefox/new/?WT.mc_id=ba3613&WT.mc_ev=click>, the FF 4.0 update for Windows is listed as 8 Megabytes, but the actual download is 12,580,112 bytes, or 12-ish Megabytes. The md5sum of what I downloaded is: $ md5sum.exe Firefox\ Setup\ 4.0.exe 417e9bc84cd14b0d7d9c05dd5e869bbe *Firefox Setup 4.0.exe Does the page I downloaded from need updating, or is there something wrong with the file I downloaded? Avast version 5.0.677 with definition version 110326-0 tells me there's nothing wrong with the file, but I'm not running it until I figure out what's up with this.

All Replies (3)

more options

An aside - the page I linked to only lists the download sizes if Javascript is disabled. Go NoScript.

Modified by samskuce

more options

All is well. I posted this to security@mozilla.org and received this response:


Thank you for pointing this out. The < noscript > text appears to be quite out of date and I will pass this along to the web site maintainers.

The expected size of Firefox 4 for windows is, indeed, 12Mb and the md5 hash you listed is correct for the en-US version. Using Windows Explorer (the file manager, not Internet Explorer the browser) you can also right-click on the installer to examine its properties and confirm that it is signed by the Mozilla Corporation. Unnecessary in this case because you've confirmed the md5 hash.

If you're curious and want to double-check in the future our hashes can be found at
https://ftp.mozilla.org/pub/mozilla.org/firefox/releases/4.0/MD5SUMS
https://ftp.mozilla.org/pub/mozilla.org/firefox/releases/4.0/SHA1SUMS

moderator broke the HTML tag that was blocking the end of this posting

Modified by the-edmeister

more options

Hey Mozilla, my previous response is not, in fact, incomplete, it only looks like it when you have JavaScript enabled, because the email I quoted contained some HTML tags. Do you need improved sanitization on these forms?