4 ms·
> What happens behind the scenes is that DuckDB downloads an extension binary The baser part of me wonders how hard it would be to compromise that supply chain
by 9cb14c1ec0 2y ago
> What happens behind the scenes is that DuckDB downloads an extension binary
The baser part of me wonders how hard it would be to compromise that supply chain.
- metadat 2y agodefine: baser > 1. (of a person or a person's actions or feelings) without moral principles; ignoble. > 2. denoting or befitting a person of low social class. (New term, to me)
- 1egg0myegg0 2y agoExtension downloads are validated using a signature check to prevent tampering! (I work for DuckDB Labs and MotherDuck)
- immibis 2y agoThe backdoored version of xz was also signed.
- sitkack 2y agoSame as PyPi. Maybe upload left pad?