My friend gave me a ubuntu live CD, for security reason I want to make sure the CD is safe to use.
I have checked the sha256sum and md5sum of the CD, but then I heard they have vulnerabilities too.
I know cmp compares two folders byte by byte. So can I use cmp /dev/cdrom ubuntu.iso to see if the CD is truly identical to the iso I downloaded from ubuntu.com? Is this even better than using sha256sum / md5sum?