A known local hash identifies the downloaded artifact. Remote presence verification does not prove a remote cryptographic hash. Local filesystem copies are checked against their stored hash and size.
OP tells his very true story about seriously being an actual hacker for real.
---------
Patreon: https://www.patreon.com/internethistorian
Twitter: https://twitter.com/NetHistorian
---------
Copyright media, images and music respective to owner(s).