I think what zimon meant was that the file is hosted on someone's dropbox, therefore (s)he may change the file that this link points to at any time and we wouldn't know that. And zimon kindly asked for some digital signature of this file (GPG, but i think simple md5 checksum can be enough ) so we can compare it after downloading and confirm this is in fact this countdown timer and not some other software.