3 ms·
> Most easily because I can inject, "cat ~/.ssh/*_rsa | curl ..." If you can inject that breaking TLS which secures everything on the internet, why can't you i
by moondev 4y ago
> Most easily because I can inject, "cat ~/.ssh/*_rsa | curl ..."
If you can inject that breaking TLS which secures everything on the internet, why can't you inject your own checksum on the "download page"?
- zbird 4y agoChecksums and the binaries can be stored in different places for redundancy.