3 ms·
> Linux's security model is based on trusting the software you're installing from the FLOSS repositories, That's not a security model, and we don't live in fai
by gf000 1y ago
> Linux's security model is based on trusting the software you're installing from the FLOSS repositories,
That's not a security model, and we don't live in fairyland.
Just take a look how well this works with npm packages. It just so happens that emacs plugins are not the most worthwhile target for attackers.
- fsflover 1y ago> npm packages This has nothing to do with what I said. npm is not a trusted or a FLOSS repository. > we don't live in fairyland When did you see a malware in Debian's repositories last time?
- jovial_cavalier 1y agohttps://en.wikipedia.org/wiki/XZ_Utils_backdoor https://en.wikipedia.org/wiki/XZ_Utils_backdoor
- fsflover 1y agoIt never came to Debian and was a work of a tremendous effort. This almost never happens, and when it does, practically nothing can protect you.