1

I'm an Aerospace Engineer just starting out in my field, I'm planning to start using Python, but I've run into a bit of a conundrum. I downloaded Python(x,y)-2.7.10.0.exe Windows installer from here (I found that link on the Official GitHub page), but the executable is unsigned.

Is there any way to verify the authenticity of the executable? Anybody else used this and had problems?

  • 1
    Did you try to ask the developers if they provide signed binaries? – Arminius Mar 1 '18 at 21:57
  • I can't find contact info for the dev. Unfortunately, it looks like this may be a dead project as its last update was over two years ago. I'm likely going to grab a different distribution. Should I delete this question? – TheSapient1 Mar 1 '18 at 23:32
  • No need to delete the question. It may prove useful to someone else who is wondering the same thing. – forest Mar 2 '18 at 2:00
1

Answering to your question and comment:

  1. If you think that the mirror you used could have been compromised, you can download the file from the other 2 mirrors available there and compare the hashes (md5 or sha1) of the downloaded files, the probability of all three sites being hacked is not very high and could help you to feel safer about it.

  2. Checking the official website, I found the History section, here you can find the names of the developer and the maintainer.

History section

If you search for these names on Google, you will be able to find their personal profiles, you can ask them if they provide signed binaries as @Arminius said, or ask them to provide you with the original file, also you can ask them the hash value to compare with the file that you downloaded.

Hope it helps.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.