-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Files: http://downloads.sourceforge.net/project/ig-scripts/bic-0.9.2.sh http://downloads.sourceforge.net/project/ig-scripts/bic-0.9.2.sh.sig SHA256 sum for bic-0.9.2.sh: e27351fcbb0ca4d93fcba1488983d42813e572881e1fcaf45af917dfa498fbf9 Homepage: http://igurublog.wordpress.com/downloads/script-bic/ Why Verify? Verifying the authenticity of downloaded files prior to installation is important to ensure that no one has tampered with the server holding the files. A PGP signature can be used to verify a file regardless of how the file or its signature was stored or delivered, as long as you have the correct key. Even if only a few people verify signatures and report bad signatures, this helps protect everyone by detecting tampering. The alternative is to risk problems as described in this link, where the invalid file was not detected for almost one year: http://forums.unrealircd.com/viewtopic.php?t=6562 The authenticity of bic-0.9.2.sh can be verified as follows: 1) If you don't already have IgnorantGuru's CURRENT key on your keyring: gpg --keyserver keys.gnupg.net --recv-keys 0x8835279A1936270694BE8B7C0EAEC485107165A1 You should visually verify that the shown fingerprint matches the one here: http://igurublog.wordpress.com/contact-ignorantguru/ 2) Download file, signature, and verify: wget http://downloads.sourceforge.net/project/ig-scripts/bic-0.9.2.sh wget http://downloads.sourceforge.net/project/ig-scripts/bic-0.9.2.sh.sig gpg --verify bic-0.9.2.sh.sig bic-0.9.2.sh This should report a good signature like this: gpg: Signature made using DSA key ID 107165A1 gpg: Good signature from IgnorantGuru (igurublog.wordpress.com) If a BAD signature is reported, please notify IgnorantGuru immediately so the file server can be checked. To install bic: sudo install bic-0.9.2.sh /usr/local/bin/bic Also be sure to install any required dependencies. See http://igurublog.wordpress.com/library/script-installation-instructions/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iF4EAREIAAYFAk1+H/4ACgkQDq7EhRBxZaGE4wD+ITUaDUFM/xRpy5UYn6HsY3br vWoufxDbVJYnACFl7PkA/A6Q+GB7wQZ4EFwGFR5KGZplgOS/wUQVxVGV88utEU9C =0AAl -----END PGP SIGNATURE-----