Comment Re:Highly unlikely the code was compromised (Score 3, Interesting) 312
The private signing key + passphrase are normally present on hera.
So all tarball signatures could be compromised.
If it happens once, it's a bug. If it happens twice, it's a feature. If it happens more than twice, it's a design philosophy.