3 ms·

You should be more worried about using npm. How do you know that when you install 100 of different dependencies, there isn't one that is turning on your mic and

by srssays 10y ago

You should be more worried about using npm. How do you know that when you install 100 of different dependencies, there isn't one that is turning on your mic and listening to your conversations? The Echo is an unlikely device to be compromised and recording everything you say, because it's pretty locked down and definitely not a general purpose computer.

CaptSpify 10y ago
(I don't use npm, but I do use other repos) The difference between an Echo and repo-code is that repo-code is open-source. I can verify it's running what it's running. AFAIK, there's no way to do that with the Echo. > it's pretty locked down source? AFAIK you can't verify what it's doing, so it doesn't matter how well it's locked down.