references.bib

@techreport{md5attack,
    title={Colliding {X}. 509 certificates},
    author={Lenstra, Arjen K and Wang, Xiaoyun and de Weger, BMM},
    year={2005}
}
@misc{GIMPSourceForge,
    author = {Michael Schumacher},
    title = {{GIMP} Project's Official Statement on {SourceForge}'s Actions},
    month = {May},
    year = {2015},
    url = {https://mail.gnome.org/archives/gimp-developer-list/2015-May/msg00144.html},
    note = {Accessed April 2016},
}
@misc{SourceForgePolicy,
    title = {Third Party Offers will be Presented with Opt-In Projects Only},
    url = {https://sourceforge.net/blog/third-party-offers-will-be-presented-with-opt-in-projects-only},
    note = {Accessed April 2016},
}
@misc{NmapSourceForge,
    title = {{SourceForge} Hijacks the {Nmap} {SourceForge} Account},
    year = {2015},
    url = {http://seclists.org/nmap-dev/2015/q2/194},
    note = {Accessed April 2016},
}
@misc{DistroWatch,
    title = {{DistroWatch} Page Hit Ranking},
    year = {2016},
    url = {https://distrowatch.com/dwres.php?resource=popularity},
    note = {Accessed April 2016},
}
@misc{ManjaroDownload,
    title = {Download {Manjaro}},
    url = {https://wiki.manjaro.org/index.php?title=Download_Manjaro},
    note = {Accessed April 2016},
}
@article{rivest1992md5,
    title={The {MD5} message-digest algorithm},
    author={Rivest, Ronald},
    year={1992}
}
@inproceedings{md51993,
  title={Collisions for the compression function of {MD5}},
  author={den Boer, Bert and Bosselaers, Antoon},
  booktitle={Advances in Cryptology—EUROCRYPT’93},
  pages={293--304},
  year={1993},
  organization={Springer},
}
@article{wang2004collisions,
  title={Collisions for Hash Functions {MD4}, {MD5}, {HAVAL}-128 and {RIPEMD}.},
  author={Wang, Xiaoyun and Feng, Dengguo and Lai, Xuejia and Yu, Hongbo},
  journal={IACR Cryptology ePrint Archive},
  volume={2004},
  pages={199},
  year={2004},
}
@inproceedings{signify,
    title={{signify}: Securing {OpenBSD} From Us To You},
    author={Unangst, Ted},
    booktitle={Presentations: BSDCan 2015},
    year={2015},
    organization={OpenBSD},
    note={\url{http://www.openbsd.org/papers/bsdcan-signify.html}},
}
@inproceedings{whitten1999johnny,
  title={Why {Johnny} Can't Encrypt: A Usability Evaluation of {PGP} 5.0.},
  author={Whitten, Alma and Tygar, J Doug},
  booktitle={Usenix Security},
  volume={1999},
  year={1999}
}
@inproceedings{sheng2006johnny,
  title={Why {Johnny} still can't encrypt: evaluating the usability of email encryption software},
  author={Sheng, Steve and Broderick, Levi and Koranda, Colleen Alison and Hyland, Jeremy J},
  booktitle={Symposium On Usable Privacy and Security},
  pages={3--4},
  year={2006}
}
@misc{openbsdrelease,
    title={Frequently Asked Questions},
    url={http://www.openbsd.org/faq/faq1.html#Next},
    note={Accessed April 2016},
}
@misc{signifylinux,
  author = {Neukirchen, Christian},
  title = {outils},
  year = {2016},
  publisher = {GitHub},
  journal = {GitHub repository},
  howpublished = {\url{https://github.com/chneukirchen/outils}},
  commit={6db4554340faa64ea3f94a4a4b067ff2fa90694f},
}
@misc{signifyosx,
  author = {Ouellet, Jean-Philippe},
  title = {signify-osx},
  year = {2015},
  publisher = {GitHub},
  journal = {GitHub repository},
  howpublished = {\url{https://github.com/jpouellet/signify-osx}},
  commit={f7ab30e870ec769555521866392818d79a29e828},
}
@misc{signifywindows,
  author = {Stoeckmann, Tobias},
  title = {signify-windows},
  year = {2016},
  publisher = {GitHub},
  journal = {GitHub repository},
  howpublished = {\url{https://github.com/stoeckmann/signify-windows}},
  commit={c7c027a5637605539ed25b2a19aa80ab4e49a865},
}
@article{stevens2015freestart,
  title={Freestart collision for full {SHA-1}},
  author={Stevens, Marc and Karpman, Pierre and Peyrin, Thomas},
  journal={Cryptology ePrint Archive},
  number={2015/967},
  pages={1--21},
  year={2015}
}
@misc{chromesha1,
    title={An update on {SHA-1} certificates in {Chrome}},
    author={Garron, Lucas and Benjamin, David},
    url={https://security.googleblog.com/2015/12/an-update-on-sha-1-certificates-in.html},
    note={Accessed April 2016},
    year={2015},
    month={December},
    day={18},
}
@misc{freebsdmirror,
    title={Mirroring {FreeBSD}},
    author={Kuriyama, Jun and Vaschetto, Valentino and Lang, Daniel and Smith, Ken},
    url={https://www.freebsd.org/doc/en_US.ISO8859-1/articles/hubs/},
    note={Accessed April 2016},
    year={2015},
    month={May},
}
@misc{freebsdrequirements,
    title={Requirements for {FreeBSD} Mirrors},
    url={https://www.freebsd.org/doc/en_US.ISO8859-1/articles/hubs/mirror-requirements.html},
    note={Accessed April 2016},
}
@misc{freebsdrelease,
    title={Release Process},
    url={https://www.freebsd.org/doc/en/articles/releng/release-proc.html},
    note={Accessed April 2016},
}
@misc{freebsdftp,
    title={Distribution},
    url={https://www.freebsd.org/doc/en/articles/releng/distribution.html},
    note={Accessed April 2016},
}
@misc{ubuntumirror,
    title={Mirrors},
    author={Collins, Paul},
    url={https://wiki.ubuntu.com/Mirrors},
    year={2016},
    month={April},
    note={Accessed April 2016},
}
@misc{ubuntursync,
    title={Rsyncmirror},
    author={Leinen, Simon},
    url={https://help.ubuntu.com/community/Rsyncmirror},
    year={2013},
    month={November},
}
@misc{ubuntuzsync,
    title={ZsyncCdImage},
    author={Morais, Jorge},
    url={https://help.ubuntu.com/community/ZsyncCdImage},
    year={2015},
    month={February},
    note={Accessed April 2016},
}
@misc{rsyncmath,
    title={Rolling checksum},
    author={Tridgell, Andrew},
    year={1998},
    month={November},
    note={Accessed April 2016},
    url={https://rsync.samba.org/tech_report/node3.html},
}
@misc{sambarsync,
    title={rsync},
    url={https://download.samba.org/pub/rsync/rsync.html},
    note={Accessed April 2016},
}
@misc{mintblog,
    title={Beware of hacked {ISOs} if you downloaded {Linux} {Mint} on {February} 20th!},
    author={Lefebvre, Clement},
    url={http://blog.linuxmint.com/?p=2994},
    year={2016},
    month={February},
    note={Accessed April 2016},
}
@misc{mintnews,
    title={Monthly News-February 2016},
    author={Lefebvre, Clement},
    url={http://blog.linuxmint.com/?p=3007},
    year={2016},
    month={March},
    note={Accessed April 2016},
}
@misc{rttperf,
    title={Analysis of {HTTP} Performance},
    author={Touch, Joe and Heidemann, John and Obraczka, Katia},
    url={http://www.isi.edu/lsam/publications/http-perf/#intro},
    year={1996},
    month={August},
    note={Accessed April 2016},
}
@article{lou2006adaptive,
  title={Adaptive content poisoning to prevent illegal file distribution in P2P networks},
  author={Lou, Xiaosong and Hwang, Kai and others},
  journal={IEEE Transaction on Computers},
  year={2006}
}