5 ms·
What better alternatives do you recommend?
by _xivi 3y ago
What better alternatives do you recommend?
- smt88 3y agoSigned executables
- joshuaissac 3y ago> What better alternatives do you recommend? Install packages only from the operating system's package repository or from another trusted repository. If the software installer is only available as a script, download the script manually and check its contents instead of piping it to a root shell (and maybe run it in a VM instead). That way, you can know if the code is trying to do something nefarious. Piping to Bash can also be detected server side, so a server can serve malicious code when it is piped and good code when it is not. https://news.ycombinator.com/item?id=11532599 https://news.ycombinator.com/item?id=11532599