Hello!
I downloaded the ISO grml96-full_2014.11.iso from the torrent I got
here: https://grml.org/download/
(http://download.grml.org/grml96-full_2014.11.iso.torrent), and then
check the hash with the one found here:
http://download.grml.org/grml96-full_2014.11.iso.sha1.asc

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA256

ea7204ed77fa3df3a4ed68e3b8e2ad6f95d5242d  grml96-full_2014.11.iso

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1
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=6L94

-----END PGP SIGNATURE-----

First I checked the signature, which was OK. Then I run sha256sum on my
file and got:

hackan@hc-vision-black:/mnt/Downloads/Downloads/0Utils/Linux/grml$ sha256sum grml96-full_2014.11.iso

d3330229a69f52ec00d6023fa3241bb43a29f5ebb29c7e518cdb3585ee9a0cae  grml96-full_2014.11.iso


which is different! this is either really bad or just a small mistake.
what happened?

EDIT:
crap, just as i was writing this, i realised that it was a SHA1 hash,
not a SHA256 one as the file says:

hackan@hc-vision-black:/mnt/Downloads/Downloads/0Utils/Linux/grml$ sha1sum grml96-full_2014.11.iso

ea7204ed77fa3df3a4ed68e3b8e2ad6f95d5242d  grml96-full_2014.11.iso


which is fine. however, the file should read Hash: SHA1 instead of SHA256


Regards,
-- 
/HacKan/, CEO *HacKan & CuBa Co.* http://www.hackan.com.ar