If anything, the scene is demonstration that a completely open, self-regulated market can function in at least some sense. Maybe one group doesn't have any strong disincentive to posting a corrupted release, but other groups have a strong incentive to discredit them, and reputation is valuable (as much as anything can be in a free economy). There is a fairly effective web of trust.
You can't be sure, of course, but then I can't be sure that my "legal" software won't install a rootkit behind my back either-- or if I am, it's because I'm going on the word of criminals who are trying to redistribute it.
If anything, the scene is demonstration that a completely open, self-regulated market can function in at least some sense. Maybe one group doesn't have any strong disincentive to posting a corrupted release, but other groups have a strong incentive to discredit them, and reputation is valuable (as much as anything can be in a free economy). There is a fairly effective web of trust.
You can't be sure, of course, but then I can't be sure that my "legal" software won't install a rootkit behind my back either-- or if I am, it's because I'm going on the word of criminals who are trying to redistribute it.