4 ms·
Distro package maintainers are not security researchers, they don't audit the code they maintain.
by tempaccount420 1y ago
Distro package maintainers are not security researchers, they don't audit the code they maintain.
- goodpoint 1y agoThis is false.
- flomo 1y agoPlus the app developers at least have some level of accountability. Like when JWZ got into it with Debian (can't link here). You might think you are running XScreensaver from the great Zawinski, but no you are actually running some weird fork from godknowswho, hopefully not Jia Tan.
- ChocolateGod 1y agoXScreensaver is supposed to hide your desktop and Jia Tan is an expert at hiding things, so I think they'd be a perfect match.
- tempaccount420 1y agoYou got downvoted but yes, it's quite sad when distros release a package under the same name as the original but with their own set of patches. I think they should rename the package when they do that, even just a prefix/suffix with the distro name would be nice.
- LtWorf 1y agoNo user cares. If they cared they would be building everything from scratch :)
- alkonaut 1y agoThey do to some extent in the larger distros, but for proprietary/binary packages they don't have much chance anyway unless they are willing to do some pretty time-consuming forensics.
- tempaccount420 1y agoIt'd be a gargantuan effort to do it for every package, most times it's just a version + hash update and maybe a test.
- LtWorf 1y agoI do, and I work at a security company. But thanks for knowing more about my life than myself, random internet person.