MCRcortex/nekodetector

Add SHA1/SHA256/MD5 hashes for release page jar

Ghifari160 opened this issue · 2 comments

I don't know how useful it would be to add these hashes given that the jar is uploaded through the build automation but it wouldn't hurt. Given that the detector tool is also a jar, presumably it could be infected? While the hashes wouldn't tell us if the jar was infected before it was uploaded (it's unlikely in the first place), it would tell us if the jar got infected after downloading it to an infected system. It's just an additional warning sign for the worst case scenario.

D3SL commented

Then it would detect itself.

Yes, assuming you ran a full system scan, the detector will scan itself.