I like to have just sha256 sums PTB in bottom of my articles and emails. So I modified the script: getlatestptb-1.1.pl And I'm sending the simple diff, or patch if used, to the list. Here it is. Cut out the entire spacer lines containing only "====", and that payload in btwn is the patch to apply: ============================================= 11a12,14 > # minor modification, to get only sha256, and not random hash, in the two-liner > # publictimestamp to append by miro.rovis@croatiafidelis.hr > # 58c61 < my @hash_names = ( "sha512", "whirlpool", "ripemd128", "ripemd160", "haval", "tiger", "sha384", "sha256", "sha160", "sha224", "tiger128", "tiger160", "tiger2", "whirlpool0", "whirlpool2", "ripemd256", "ripemd320"); --- > my @hash_names = ( "sha256"); ============================================= So it can be saved as getlatestptb-1.1_miroR.pl.patch, and applied on the original file like this: $ patch getlatestptb-1.1.pl -p1 < getlatestptb-1.1_miroR.pl.patch Now, since the original file is changed it should be renamed. I renamed it like this: $ mv -iv getlatestptb-1.1.pl getlatestptb-1.1_miroR.pl and that's what I'll be using. You can also find my PGP signed modified script on: http://www.croatiafidelis.hr/gnu/pts/ Conversely, if someone wants to, say, verify the original script via intermediary of my script, they could download my modified script and the patch, and the sigs for both and first verify them, and then to via intermediary verify the original script that they previously downloaded from sourceforge, they could do: $ patch getlatestptb-1.1_miroR.pl -R -p1 < getlatestptb-1.1_miroR.pl.patch $ mv -vi getlatestptb-1.1_miroR.pl getlatestptb-1.1_BIS.pl Now the: $ diff getlatestptb-1.1.pl getlatestptb-1.1_BIS.pl $ must return no output. Else some of the files somewhere has been compromised. I'm really not a developer, this is my best on this. I guess, however, that what I explained above could prove necessary for newbies who might find out about this list. I like Public Time Stamp. I noticed it way back when it was pointed to me from, I guess http://www.jonelo.de/java/jacksum/ , which is soon to be www.jacksum.net, back when jacksum.jar was used for calculating hashes for PTS. Only back then I didn't understand enough. Jan O. Kechel, I appreciate your efforts. I'll send this to the publictimestamp-devel@lists.sourceforge.net and also to your own address, and also I'll keep it at: http://www.croatiafidelis.hr/gnu/pts/ after I publictimestamp it. I don't get it how this list is infrequent to this extent. It could be some sabotage from some part (hopothesis, pls. take note: only hopothesis). But I like to track my own moves on the internet to support good causes like this one, pls. see how I screencast my way on the net, and pcap-dump at the same time: http://www.croatiafidelis.hr/gnu/Flowstamp/ If I don't receive any feedback from you, then those who read this file, which I will name: Pts-dev_getlatestpts_miroR_140802.txt will have no follow-up of the name Pts-dev_getlatestpts_miroR_140NNN.txt (NNN depends on the month and date of the future conversation), and of course, in that case the hypothesis above becomes a more likely possibility of what may will have happened. Miroslav Rovis Zagreb, Croatia www.CroatiaFidelis.hr -- publictimestamp.org/ptb/PTB-21269 sha256 2014-08-02 00:01:45 337FA390BF097914B4EED77462E1BE334028457B70201BDBE894A8FB9BB359C1