Hacker News new | ask | show | jobs
by 1egg0myegg0 713 days ago
Extension downloads are validated using a signature check to prevent tampering!

(I work for DuckDB Labs and MotherDuck)
1 comments
immibis 712 days ago
The backdoored version of xz was also signed.
link