News for hackers. Stuff that matters.

A comment on Ruby 2.1 Released.

Re:Ruby 2.1 Released by ballard on Thursday December 26, 2013 @01:01AM (#6965403)
Unsigned tarballs: Security fail.
[ Parent | on HN ]
Re:Ruby 2.1 Released by ddebernardy on Thursday December 26, 2013 @05:46AM (#6965890)
See here:

http://www.ruby-lang.org/en/news/2013/12/25/ruby-2-1-0-is-re...

[ Parent | on HN ]
Re:Ruby 2.1 Released by ballard on Thursday December 26, 2013 @08:38AM (#6966204)
That's md5 and sha256 hashes, not a gpg signature.

There's a world of difference when something is unsigned because it's impossible to prove that it was what the developer(s) signed off to release.

[ Parent | on HN ]