3 ms·
Don’t those binaries come with signatures you can verify? People in the community would notice if building from source produced different signatures than the bi
by rank0 5y ago
Don’t those binaries come with signatures you can verify? People in the community would notice if building from source produced different signatures than the binaries provided directly by torproject
- pphysch 5y agoIn practice the USG would not distribute malevolent binaries everywhere, but could target them to particular IP- and time-ranges. Downloading Tor from a particular IP in Iran? We'll add a little something extra... Or maybe you're a US citizen with a set of known IPs on a "watchlist".
- sneak 5y agoThe USG does not operate or control the Tor Project’s servers.