3 ms·
>but downloading a Fedora or Debian install is in no way comparable to installing binaries from random filesharing websites. What if you download binaries from
by la_barba 7y ago
>but downloading a Fedora or Debian install is in no way comparable to installing binaries from random filesharing websites.
What if you download binaries from non-random, trusted websites? Seem to me that is the same as trusting a repo maintainer.
- rwmj 7y agoYou omitted where I said distros "have processes in place". We can discuss whether the processes are adequate, but the situation itself is completely different from downloading binaries from websites, trusted or otherwise.
- la_barba 7y agoI don't think its "completely different". Its only a minor difference in my view. We'll just have to agree to disagree. IMO repository maintainers are not going to code review every patch in every package, and logistically they can't anyway. The only 'process' here AFAICT, is to take down the patch once news spreads of a bad patch.