Re: [Bitcoin-development] Fake PGP key for Gavin

2014-03-24 Thread The Doctor
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 03/23/2014 03:12 PM, Troy Benjegerdes wrote: I find it more likely that fake PGP keys are from corporate industrial espionage and/or organized crime outfits. Intelligence agencies will stick to compromised X509, network cards, and binary

Re: [Bitcoin-development] Fake PGP key for Gavin

2014-03-23 Thread Troy Benjegerdes
On Sat, Mar 22, 2014 at 06:03:03PM +0100, Mike Hearn wrote: In case you didn't see this yet, http://gavintech.blogspot.ch/2014/03/it-aint-me-ive-got-pgp-imposter.html If you're using PGP to verify Bitcoin downloads, it's very important that you check you are using the right key. Someone

Re: [Bitcoin-development] Fake PGP key for Gavin

2014-03-22 Thread Gavin Andresen
On Sat, Mar 22, 2014 at 1:03 PM, Mike Hearn m...@plan99.net wrote: do we codesign the Windows binaries? Yes, the -setup.exe installers are Authenticode (or whatever Microsoft is calling that these days) code-signed. -- -- Gavin Andresen

Re: [Bitcoin-development] Fake PGP key for Gavin

2014-03-22 Thread Peter Todd
On Sat, Mar 22, 2014 at 06:03:03PM +0100, Mike Hearn wrote: In case you didn't see this yet, http://gavintech.blogspot.ch/2014/03/it-aint-me-ive-got-pgp-imposter.html If you're using PGP to verify Bitcoin downloads, it's very important that you check you are using the right key. Someone

Re: [Bitcoin-development] Fake PGP key for Gavin

2014-03-22 Thread Oliver Egginger
Am 22.03.2014 18:03, schrieb Mike Hearn: In case you didn't see this yet, http://gavintech.blogspot.ch/2014/03/it-aint-me-ive-got-pgp-imposter.html If you're using PGP to verify Bitcoin downloads, it's very important that you check you are using the right key. Someone seems to be creating