3 ms·
If something’s malicious, shouldn’t we just flag and remove it? Why is a concept of trust needed here?
by matthewbauer 8y ago
If something’s malicious, shouldn’t we just flag and remove it? Why is a concept of trust needed here?
- outside1234 8y agoWell, because that itself would become another attack vector. You need some sort of post-review after something is flagged malicious to prevent arbitrary take downs.
- TheCoelacanth 8y agoYou would, but that doesn't help you until someone figures out that it is malicious. This lets you track who has actually verified that the package is not malicious.