Check the signatures before unpacking. It would be nice if they would post the SHA256 and SHA512 sums as well. Here's what I'm getting: SHA 256 fbdd33d3384574297b88744622382008d1e0f9ddd300d330746c464b7a7d746a tor-0.2.9.8.tar.gz 7013353f0cbd2af8c0144f6167339f6eb252eb35ca9a2db2971310171108b064 tor-0.3.0.1-alpha.tar.gz