Re: [Trisquel-users] Verifying install files (Zotero)

[jbahn]

It's not helpful when the attacker can both add their own malicious version  
and also alter the posted checksums so that they match.

How likely are we to fall victims of such an offence?