Wilhelm von Freiheitsberg on Nostr: That's why it's always a good idea to post a PGP signed checksum of your releases and ...

That's why it's always a good idea to post a PGP signed checksum of your releases and the users acquire the habit of checking it.

Would be great to have a native way to check it with PGP on Obtanium.

quoting
nevent1q…rdd0

Somehow 48 minutes ago our release for Windows was replaced. @github doesn't provide any audit log to understand what happened.

We have just removed the fake installer but clearly that's not enough. We will continue investigating the issue.

Have anyone suffered something similar?