I'm very curious to learn how this happened but good thing it was caught so quickly. They say a contributor key was compromised. Do they know which one? How many contributors can make releases? That's kind of a sensitive issue.
Is the installer not signed? Who has access to these signing keys?
LeoWandersleb / Leo Wandersleb
npub1gm…78rf6
2024-07-10 19:22:46 UTC
in reply to nevent1q…4sya
Author Public Key
npub1gm7tuvr9atc6u7q3gevjfeyfyvmrlul4y67k7u7hcxztz67ceexs078rf6Published at
2024-07-10 19:22:46 UTCEvent JSON
{
"id": "9c130944e081f2e680dcd5782a67b75654572ec8bc534341af293ed2ad8aebc7",
"pubkey": "46fcbe3065eaf1ae7811465924e48923363ff3f526bd6f73d7c184b16bd8ce4d",
"created_at": 1720639366,
"kind": 1,
"tags": [
[
"e",
"4d44cc5fbbba5677edc7202bf89c12f79cda3f199448cd3149555cbfdef74ec2",
"",
"root"
],
[
"e",
"4d44cc5fbbba5677edc7202bf89c12f79cda3f199448cd3149555cbfdef74ec2",
"",
"reply"
],
[
"p",
"b7ed68b062de6b4a12e51fd5285c1e1e0ed0e5128cda93ab11b4150b55ed32fc",
"",
"mention"
]
],
"content": "I'm very curious to learn how this happened but good thing it was caught so quickly. They say a contributor key was compromised. Do they know which one? How many contributors can make releases? That's kind of a sensitive issue.\n\nIs the installer not signed? Who has access to these signing keys?",
"sig": "8903b08e202dd5241c128baff7acad40671c92ea8956ca8f9287b8c9f9c45024f24f11cea78f0c5621811b9809c510e9476b2d91e6f3e77052efbcfbb5e45412"
}