3 ms·
> Download at your own risk Baseless fear-mongering or is there some truth to this you can elaborate on?
by eatbitseveryday 4y ago
> Download at your own risk
Baseless fear-mongering or is there some truth to this you can elaborate on?
- hn92726819 4y agoThere are many attack vectors with a dump like this. Running any make, mvn, cargo build, ./configure, etc command can run arbitrary code on your system. These can be added by the anonymous uploader or yandex themselves (they could add a dependency to some tracking site to get your IP as the most basic example). There can also be dangerous git hooks. you're basically downloading a malicious exe, and any seemingly harmless command could be dangerous
- xcdzvyn 4y agoThere'd be no harm in poking around.
- capableweb 4y agoMore like: might be illegal in your country to even download (don't know where the downloader is from, laws differ and bittorrent dht is easy to spy on) and I'm not the first-hand source of the torrent nor have I downloaded it myself, just forwarding a download link.
- ormax3 4y agojust means that given the nature of BitTorrent, you will be exposing your IP address to other peers and trackers