On Jul 1, 2016, at 3:42 PM, Ross Berteig <r...@cheshireeng.com> wrote:
> On 7/1/2016 10:11 AM, Lonnie Abelbeck wrote: >> It seems the Checksums are on a different site from the downloads, >> raising the bar for mischief. BTW including 1.35 now. >> http://www.hwaci.com/fossil_download_checksums.html > > FYI, Hwaci is D. R. Hipp's company that owns the assigned copyrights to all > work on fossil. Quoting that page, "Hipp, Wyrick & Company, Inc., or "Hwaci" > for short, is a small North Carolina company providing knowledge services to > clients around the world since 1992." > > That site is as official as fossil-scm.org. Indeed, and this requires a bad guy to hack two different servers to create bogus downloads and SHA1's. As usual, well done D. R. Hipp. Lonnie _______________________________________________ fossil-users mailing list fossil-users@lists.fossil-scm.org http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users
