Skip to content
Prev 38975 / 63424 Next

trojan at current development version?

Uwe Ligges <ligges <at> statistik.tu-dortmund.de> writes:
signatures and legitimate
case.
Another note for the paranoid is that the MD5 sum for the binary
is posted, so you can at least check consistency.  On the  other hand,
if someone managed to compromise an entire CRAN mirror, they could
also post MD5 sums for their nastified version ...  you could always
go check the MD5 sums on another CRAN mirror (or on the main page),
which would make the attacker work much harder ...