Leo Wandersleb on Nostr: I'm very curious to learn how this happened but good thing it was caught so quickly. ...
I'm very curious to learn how this happened but good thing it was caught so quickly. They say a contributor key was compromised. Do they know which one? How many contributors can make releases? That's kind of a sensitive issue.
Is the installer not signed? Who has access to these signing keys?
Published at
2024-07-10 19:22:46Event JSON
{
"id": "9c130944e081f2e680dcd5782a67b75654572ec8bc534341af293ed2ad8aebc7",
"pubkey": "46fcbe3065eaf1ae7811465924e48923363ff3f526bd6f73d7c184b16bd8ce4d",
"created_at": 1720639366,
"kind": 1,
"tags": [
[
"e",
"4d44cc5fbbba5677edc7202bf89c12f79cda3f199448cd3149555cbfdef74ec2",
"",
"root"
],
[
"e",
"4d44cc5fbbba5677edc7202bf89c12f79cda3f199448cd3149555cbfdef74ec2",
"",
"reply"
],
[
"p",
"b7ed68b062de6b4a12e51fd5285c1e1e0ed0e5128cda93ab11b4150b55ed32fc",
"",
"mention"
]
],
"content": "I'm very curious to learn how this happened but good thing it was caught so quickly. They say a contributor key was compromised. Do they know which one? How many contributors can make releases? That's kind of a sensitive issue.\n\nIs the installer not signed? Who has access to these signing keys?",
"sig": "8903b08e202dd5241c128baff7acad40671c92ea8956ca8f9287b8c9f9c45024f24f11cea78f0c5621811b9809c510e9476b2d91e6f3e77052efbcfbb5e45412"
}
