3 ms·

I’m sure this app requires root privileges. I hope people aren’t downloading binary blobs from an Internet forum and then running them as root... Totally not s

I’m sure this app requires root privileges. I hope people aren’t downloading binary blobs from an Internet forum and then running them as root... Totally not saying that’s the case here. But honestly I’m surprised we don’t see more malware targeting developers. After all, we are the most likely to run arbitrary code on our computers. And a lot of us have valuable private keys (e.g. build systems) in our keychain.

52-6F-62 9y ago
Or in predictable locations. API keys as well. There's a ton of room for abuse. Case: many Node native libraries are blocked off on NPM and issue warning messages if you try to install them via `npm install ...` — you will also find that there are a few closely-named packages to many popular ones in the hopes people will pull them down.