Has LyX Been Hacked?

[Pavel Sanda]

On Tue, Jan 31, 2023 at 06:06:36PM +1300, Paul Kiwi wrote:
> I downloaded:
> 
> https://lyx.mirror.garr.it/bin/2.3.7/LyX-237-Installer-1-x64.exe
> 
> After installing and launching LyX, I got a very strange error message. It
> was a large amount of text in Chinese characters. Using a translation tool,
> the text seemed to be random badly translated proverbs such as "You should
> respect the tea ... defend the scorpion cup" etc. The english translation
> was nonsense.
> 
> I am unable to verify the sig. I might be doing the verification procedure
> incorrectly, but GPG says it cannot be verified.

Can you at least give us your sumcheck of the file you downloaded?

I just check that the file at the url above is properly signed
(that mean at least no one tampered with the file on the ftp server...)

Pavel