4 ms·
Would you object to google or facebook getting private keys installed on your computer without being asked? How about a repo just for the CCP/US Gov/Russia?
by fartcannon 6y ago
Would you object to google or facebook getting private keys installed on your computer without being asked?
How about a repo just for the CCP/US Gov/Russia?
- azinman2 6y agoThe private keys are specifically for accessing a repo, which is also easy to disable. No, I wouldn't object if I was downloading software from them: I'd want it to be cryptographically verified. Similarly, I accept an OS with keys from Google and all kinds of people and governments in the form of SSL root certificate trust. If I was getting software from the CCP/US Gov/Russia then that would also be fine. Here I'm not, it's a repo for VSCode from Microsoft. Context matters.
- fartcannon 6y agoFor the rest of us, I guess the canary died.
- azinman2 6y agoCan you point me to this 'death' scenario? What did it die of? Are you worried Microsoft is going to install spyware by overriding something like 'git' in their repo that your pi would download instead? I see I'm getting downvoted, but no one has actually spelled out the potential evil scenario here other than better LinkedIn recruiting.