Pinned post
Important info about our project's security model.
TLDR: Releases are only published in our official repo, and make sure to verify your downloads as authentic.
You are the software authenticity assurance.
TLDR: Releases are only published in our official repo, and make sure to verify your downloads as authentic.
You are the software authenticity assurance.
The foundation of @SeedSigner's security model relies on users taking on the responsibility to ensure they are running valid software -- because we use off-the-shelf parts, the hardware will run any code that you load on it.
Instructions on downloading and cryptographically validating that you have our released software can be found at:
github.com/SeedSigner/see…
The ONLY place where we release binaries is in our Github repo:
github.com/SeedSigner/see…
The project's PGP key that has been published on multiple platforms can be found at:
keybase.io/seedsigner
Our software releases are deterministic and can also be built from source to validate our released binaries. Building from source is not as difficult as you would think, instructions can be found at:
github.com/SeedSigner/see…
We also have an awesome community in our Telegram channel where you can find earnest help should you need it with any of the above:
t.me/joinchat/GHNuc…
Note that Telegram is not perfect and impostors may DM you offering help -- any technical help from Telegram should happen **out in the open** within the main community chat.View quoted post on X
