3 ms·
That is what it does at this moment. Will it do that 8 seconds from now? There is no signature checking. Distributing unsigned software, then asking users to b
by lrvick 3y ago
That is what it does at this moment. Will it do that 8 seconds from now? There is no signature checking.
Distributing unsigned software, then asking users to blindly execute it, is simply irresponsible.
- Alifatisk 3y ago> That is what it does at this moment. Will it do that 8 seconds from now? In that case, you can simply stick to the commit hash you read the source code from. https://raw.githubusercontent.com/nanovms/ops/0b7e8bb9e567672840294a900232a94ff9e91b09/install.sh https://raw.githubusercontent.com/nanovms/ops/0b7e8bb9e56767...
- lrvick 3y agoAgain. Who is to say that this will not change or be MITMed? Download first, review, then execute. Or even better, download, verify signatures from multiple reputable people, optionally review, then execute.
- Alifatisk 3y ago> Who is to say that this will not change Isn't the commit and its hash immutable?