A freeware program used to live in several places at once. The author’s site held the current version; a university FTP server, a download portal, or a hobbyist’s mirror held copies. Shareware grew up on that redundancy. When one host died or ran out of bandwidth, another copy kept the program findable, and no single outage could silence it.
Mirrors break in two directions
A mirror can vanish, which is the visible failure. Domains lapse, university accounts get pruned, portals purge older versions during redesigns, and the download page everyone linked to starts returning 404s. The other failure is quieter: a mirror stays up and stops being a faithful copy.
In late 2011, Nmap developer Gordon Lyon, who writes as Fyodor, discovered that CNET’s Download.com was wrapping Nmap inside a portal-made installer that offered browser toolbars and changed browser settings. Lyon’s original warning to Nmap users argued that users were being handed CNET’s executable while believing they were downloading Nmap’s own installer. Krebs on Security independently tested the wrapper and found that several antivirus engines flagged CNET’s installer. Wireshark got similar treatment until its project director sent a cease-and-desist. CNET later apologized and said open-source packages would no longer be bundled. The episode showed why a mirror can remain online and still stop being a faithful copy of what an author released.
What a faithful copy looks like
Verification starts with the author. If the developer still runs a download page with checksums, compare the candidate file’s hash against the published value; that alone rejects a doctored copy. Official mirror lists, which shareware authors once maintained by hand, name the servers the developer vouches for. When the author has disappeared, Wayback Machine captures of the download page and the Internet Archive’s Software Library are the best surviving evidence of exactly which file was released.
That is also where recovery stops. A mirror records what it shelved, not what it was supposed to be. If the author’s site and release notes are gone, and nobody captured the official file alongside its hash, the portal copy is all that remains — proof that a program was hosted somewhere, not proof of what it was. Mirrors solved availability, never identity. When a copy is all that survives, certainty about what was actually released is the first casualty.