title: What's the point in providing an MD5 or SHA1 hash along with a downloadable executable?
body: <p>I thought they were there for security; to check that the file hasn't been tampered with. But surely if someone is capable of modifying the file then they are also capable of modifying the page with the hash!</p>
  
  <p>What security does this actually offer?</p>