4 ms·
do you read the script sections of all the packages you install?
by jamespo 3y ago
do you read the script sections of all the packages you install?
- gabrielgio 3y agoNo, it is unfeasible (at least for me) to validate every single package. So at some point I have to trust someone/ some party and I chose to trust more the maintainers of my distro than a person asking me to run sudo from curl.
- Joker_vD 3y agoAnd some people trust the software authors more than some random repo maintainers who don't have enough time to even make sure the packages they update are actually still compatible with each other.
- codedokode 3y agoYou do not need to trust anyone if the program is run inside a sandbox. This sandbox is supported in hardware since 80386, but Linux doesn't make proper use of it.
- johnklos 3y agoYes, or I get my packages through a trusted package system, such as pkgsrc.
- oneshtein 3y agoIn Linux, to install virus or malware, you need to download, compile, and install virus manually, OR user can install it using `curl ... | bash`, which is much simpler method. Even newbies can install new malware using `curl ... | bash`.