EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Hacker News·Aug 11·5 min read
Updated GPG Key for Signing Firefox and Thunderbird Releases
TL;DR
Mozilla has transitioned to a new GPG signing subkey for Firefox and Thunderbird releases after the previous key was accidentally exposed in a private GitHub repository. The old key has been revoked, and new safeguards are in place to prevent future incidents.
✦ Why It Matters
Import the new GPG signing key today to maintain the integrity of your Firefox and Thunderbird installations.
Key Takeaways
- Import the new GPG signing key if you verify signatures manually.
- Remove the old signing key before importing the new one.
- Follow specific instructions for RPM users on Fedora and openSUSE.
- Check the fingerprint of the new key before accepting it.
How It Works
GPG (GNU Privacy Guard) uses public-key cryptography to sign and verify the authenticity of software releases. The signing key allows users to confirm that the software has not been tampered with and is indeed from the expected source.