I’ve got a question: Are there md5 hashes for the piwik downloads. I’m looking for something like this for ubuntu:
I think something like this would make sense even more since the attack from nov the 12th of the last year.
I just remembered that I posted this and wondered why no one answers to this topic. I really can’t understand that piwik doesn’t use a mechanism like hashes to ensure save downloads. Nov the 12th of last year is proof that there is a need to make downloads save. And as far I can’t see what the piwik team is doing to avoid being hacked again and delivering corrupted files.
I would really apreciate an answer.
We’ve moved the files to builds.piwik.org server where no PHP or dynamic script runs, so now things should be very safe. We considered doing hashes but we have very limited time and resources