5 ms·

It's about the same as "download install.exe and run it," really.

• gnulinux 7y ago
  Which, people should never ever do either. Maybe as a SWE I'm too removed from other people's use cases but I cannot recall the last time I ran an executable on my computer that didn't go through a centralized inspection. Be it me myself, or Debian team etc...
  • ghshephard 7y ago
    What are your feelings on adding third-party PPAs?
  • weberc2 7y ago
    So the dephell maintainers should go through the Debian team or similar in order to distribute? Good grief...
    • gnulinux 7y ago
      No, I can read the source code. I'd be 100% fine if they advertised people to run `curl xyz; nano xyz; python3 xyz`. The stupid&dangerous part is `|python3`. It allows people to run arbitrary code in your machine.
      • weberc2 7y ago
        If people can’t figure out how to do that on their own, they aren’t going to be equipped to detect issues in the source anyway.