BrianKrebs on Nostr: Anyone know if Signal publishes the SHA-1 (or some hash) of its desktop versions? I ...
Anyone know if Signal publishes the SHA-1 (or some hash) of its desktop versions? I don't like installing critical apps like this without verifying their integrity.
I know I'm showing my age in a Man Shakes Fist at Cloud way, but it wasn't so long ago that software makers actually published this information on their downloads page.
Published at
2024-09-16 15:56:19Event JSON
{
"id": "47d879b25c3d00b7b944843f3d66d31723733e94f8c2462e5051d23900152e88",
"pubkey": "1a5ac5b37984c5e37a11bc914029a81f025326ea7950c9475d9a3f21a494cb56",
"created_at": 1726502179,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/users/briankrebs/statuses/113148046828092886",
"activitypub"
]
],
"content": "Anyone know if Signal publishes the SHA-1 (or some hash) of its desktop versions? I don't like installing critical apps like this without verifying their integrity. \n\nI know I'm showing my age in a Man Shakes Fist at Cloud way, but it wasn't so long ago that software makers actually published this information on their downloads page.",
"sig": "135b9df3957d4ae537ca132125974eb05d05dad3f07b59be71ab927158c0a8dff5c2e6eca2461878a0fa3290fd8affba72b1bdc1f425b71caa2d7bdec886318d"
}