Thanks Jimmy, but without the public key it's not really possible to verify that is it?

Plenty of fingerprints: PGP: C1D7 97BE 7D10 5291 228C D70C FAA6 17E3 2679 E455

But no sign of a Jimmy Song on pgp.mit.edu or keyserver.ubuntu.com according to:

gpg --keyserver pgp.mit.edu --keyserver keyserver.ubuntu.com --s
earch-keys "song"