7

When we download a .FTF or ROM file as a stock ROM, is there a way to verify that it is really the stock ROM and is not modified by someone?

Improve this question
7
  • If you downloaded it from "official" sites such as Sony's own, or Samsung, you are ok that it is not modified - look at xda, modaco, pda4net.ru - completely modified ROMs... just saying, common sense, along with MD5/SHA1 checksums...
    – t0mm13b
    Commented Jul 23, 2013 at 14:55
  • @t0mm13b, I downloaded it from xda-developers forum.
    – hpn
    Commented Jul 23, 2013 at 16:05
  • @t0mm13b By "completely modified ROMs", do you mean that they contain malware?
    – hpn
    Commented Jul 23, 2013 at 18:31
  • 1
    Modified ROMs does not imply malware! It very well means, tweaks to system scripts, UI tweaks, bloat removed! As for malware, hmmm... try a chinese warez site and download from there, then yes, probability very very high!
    – t0mm13b
    Commented Jul 23, 2013 at 18:46
  • I know meaning of modified ROM! but since I'm asking about ROMs provided as stock, then if they are modified and also provided as stock, they should contain malware:)
    – hpn
    Commented Jul 23, 2013 at 19:53

1 Answer 1

Reset to default
6

Yes, you can check the SHA1 or MD5 checksum.

You didn't specify which ROM you are downloading. Let's have a look at the Nexus stock ROMs:

https://developers.google.com/android/nexus/images#mantaray

There is a download link and a version number and checksums listed like that:

To verify a checksum you can do it via command line:

$ md5sum mantaray-jdq39-factory-d79f489e.tgz
b7a1162fb4e617143306ef6c4ca6c040

Or:

$ openssl sha1 mantaray-jdq39-factory-d79f489e.tgz 
SHA1(mantaray-jdq39-factory-d79f489e.tgz)= d79f489e1001d183b31d8a407b47cd5b8e9505cd

If it matches with the one stated at the google page, you can assume the file is not corrupted or modified.

Note: Linux, MacOS, Windows

The terminal commands only work out of the box in MacOS or Linux. To verify checksums in Windows there is a tool by Microsoft called Checksum Integrity Verifier.

Improve this answer
2
  • Thanks. Is there somewhere to find md5sums for sony(xperia z) official ROMs? I have downloded Xperia_Z_C6602_10.3.A.0.423_Generic US
    – hpn
    Commented Jul 23, 2013 at 13:55
  • Well, Sony is neither offering direct download links nor telling anything about file integrity. The only thing you can do is doing it like described here: Download via official Sony Software. In future, don't buy Sony devices :p
    – q9f
    Commented Jul 23, 2013 at 18:31

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .