4 ms·
Well you could download the script, review it, and only then run it? Despite encountering your kind of attitude many times in the past, I don't get it at all.
by tasuki 2y ago
Well you could download the script, review it, and only then run it?
Despite encountering your kind of attitude many times in the past, I don't get it at all. Maybe I'm missing something.
If you do trust the author of said thing, what's the problem?
If you don't trust the author, why would you even run their scripts?
No offense, but even if you do inspect all of the code, I doubt you'd be able to find all the potential backdoors and issues. If you trust the author of Omakub, they have the ability to screw your security anyway, I don't think there's a way of preventing that.
- wakawaka28 2y agoThere are multiple levels of trust. Do I trust the author to not put exploits in my face? Do I trust them to administer their own server in a way that won't leave users open to hackers? Do I trust them to not put in some underhanded backdoor in a spot where they know I won't be looking? Generally, piping random scripts into a shell is awful, even if you vaguely trust the author of the thing you think you're getting. There are multiple ways you can end up with unexpected evil code on your system that way, with or without the project itself being involved.