3 ms·

So you're saying it's exactly the same as binary installers, which frequently download additional components during installation?

• josephcsible 2y ago
  When binary installers download additional components, they usually do so in a way indistinguishable server-side from downloading a file to analyze.
  • chowells 2y ago
    Honest ones, sure. Why would a malicious one leave behind evidence of its malicious behavior? The threat model is identical.
    • josephcsible 2y ago
      But that behavior would be noticeable in the original download, which would be evidence itself.