> And how's that been working out for them (and their users)? It likely worked out fine for anyone who checked the SHA256 before installing it. Which, unfortun

> And how's that been working out for them (and their users)? It likely worked out fine for anyone who checked the SHA256 before installing it. Which, unfortunately, is likely a small minority of users.