3 ms·
Wonder why they don't put it on github... I feel MUCH more comfortable browsing "open source" code on somewhere like that than I do downloading and extracting a
by martinky24 3y ago
Wonder why they don't put it on github... I feel MUCH more comfortable browsing "open source" code on somewhere like that than I do downloading and extracting a .zip archive from a random website.
- crotchfire 3y agoYou shouldn't. Github is a gigantic pile of javascript that has to execute on your machine. `Unzip` doesn't execute anything. If you're really paranoid, use an `unzip` tool written in Rust: https://lib.rs/keywords/zip-archive https://lib.rs/keywords/zip-archive
- Sayrus 3y agoNo, he really should. Unzip is not the only software interacting when downloading things. A browser has way better sandboxes than the rest of the operating system and desktop environnement. For instance, here is a vulnerability from the past year leading to code execution on download: https://github.blog/2023-10-09-coordinated-disclosure-1-click-rce-on-gnome-cve-2023-43641/ https://github.blog/2023-10-09-coordinated-disclosure-1-clic...