Hacker News Reader

> While investigation has not revealed evidence of unauthorized usage of the exposed GPG key

I'm curious how they'd investigate or verify this, the key in question is used for downloaded releases and plugins.

I doubt they could verify it otherwise they could have simply stated they have verification the key wasn't compromised. Instead they said an "investigation has not revealed evidence" which can mean anything. Just looking at a bunch of logs (or even if you don't have any logs) you can claim the investigation "has not revealed evidence".

Reply on news.ycombinator.com