Hot answers tagged

21 votes
Accepted

How can someone verify that the source downloaded from github is genuine?

Signed git commits allow a user to verify the source was signed by one of the contributors. In order for this to work, however, several steps have to be taken: The user must have git and GPG ...
user avatar
  • 34.6k
4 votes
Accepted

Source code history "immutability"

If history is rewritten, you will not be able to pull over an existing tree (it's a bit more complicated, but in the general case where you're only ever on master, it holds). This is the "fast forward"...
user avatar
  • 34.6k
2 votes
Accepted

Security model for new auto update feature in GUI v0.16.0.2 'Nitrogen Nebula'

The security features were listed in the initial announcement post of the auto-updater: We added the following security features: 3 out of 4 DNS server must indicate a new update is available. The ...
user avatar
  • 14.9k

Only top scored, non community-wiki answers of a minimum length are eligible