kicad-developers team mailing list archive

[Simon Richter <Simon.Richter@xxxxxxxxxx>]

Hi,

On 17.02.2016 19:55, Wayne Stambaugh wrote:

> Is there any way
> to confirm that the installer on the website hasn't been compromised?

That is a known problem with the heuristic detection: it triggers often
on JIT compilers, so it is possible that we are getting false alarms here.

> Perhaps an md5sum of the original installer binary.  Can someone who has
> access to the packager builder please look into this for me.

I'm extending the build script so the SHA sums of the generated files
are recorded in the build log, then we can check them easily.

   Simon

Attachment: signature.asc
Description: OpenPGP digital signature